aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2017-03-03 04:39:06 +0100
committerMichael Niedermayer <michael@niedermayer.cc>2017-08-23 13:15:16 +0200
commit02d1d31eaa386558d1efff3b4880031da93ae0cc (patch)
treec336c9d7e960e7a11c8902195c953cd47fcb9f26
parent1fc71aabc40dd07ec8fe83238454cbee4630bf0b (diff)
downloadffmpeg-02d1d31eaa386558d1efff3b4880031da93ae0cc.tar.gz
avcodec/h264_mvpred: Fix multiple runtime error: left shift of negative value
Fixes: 710/clusterfuzz-testcase-5091051431788544 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit ab998f4c7faf90d0e46b6ead38a1df1f6a31e2eb) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavcodec/h264_mvpred.h2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/h264_mvpred.h b/libavcodec/h264_mvpred.h
index 5f1e9a1ee5..03dc7352fe 100644
--- a/libavcodec/h264_mvpred.h
+++ b/libavcodec/h264_mvpred.h
@@ -243,7 +243,7 @@ static av_always_inline void pred_8x16_motion(H264Context *const h,
if (IS_INTERLACED(type)) { \
refn >>= 1; \
AV_COPY32(mvbuf[idx], mvn); \
- mvbuf[idx][1] <<= 1; \
+ mvbuf[idx][1] *= 2; \
mvn = mvbuf[idx]; \
} \
} \