diff options
author | Michael Niedermayer <michael@niedermayer.cc> | 2018-10-24 01:44:12 +0200 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2018-10-25 00:24:54 +0200 |
commit | 15296d64ca4f691285f245b1e5af04241e5b2fd2 (patch) | |
tree | 1db0e38572f8762eb29636915d4b7eb452f67152 | |
parent | 82e796a4c9ccaf2765c0a1e85dbcec73733f4246 (diff) | |
download | ffmpeg-15296d64ca4f691285f245b1e5af04241e5b2fd2.tar.gz |
avutil/integer: Fix integer overflow in av_mul_i()
Found-by: fate
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 3cc3cb663bf3061e40356392d2f7638de6a479fe)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r-- | libavutil/integer.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavutil/integer.c b/libavutil/integer.c index 6d6855fa1b..ba4aa778c9 100644 --- a/libavutil/integer.c +++ b/libavutil/integer.c @@ -74,7 +74,7 @@ AVInteger av_mul_i(AVInteger a, AVInteger b){ if(a.v[i]) for(j=i; j<AV_INTEGER_SIZE && j-i<=nb; j++){ - carry= (carry>>16) + out.v[j] + a.v[i]*b.v[j-i]; + carry= (carry>>16) + out.v[j] + a.v[i]*(unsigned)b.v[j-i]; out.v[j]= carry; } } |