aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2023-10-20 23:50:07 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2023-11-01 16:40:20 +0100
commit2817efbba331ac1d3a39fbee78b480008ce20a93 (patch)
treedaff9b8ec8b73fc2491b33654744c571cd26dedf
parent2def61778777e998e2ac538f56b8e6779b0ca8c1 (diff)
downloadffmpeg-2817efbba331ac1d3a39fbee78b480008ce20a93.tar.gz
avcodec/dovi_rpu: Use 64 bit in get_us/se_coeff()
Fixes: shift exponent 32 is too large for 32-bit type 'int' Fixes: 63151/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5067531154751488 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavcodec/dovi_rpu.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/libavcodec/dovi_rpu.c b/libavcodec/dovi_rpu.c
index f6485256c4..a6b23f4dd1 100644
--- a/libavcodec/dovi_rpu.c
+++ b/libavcodec/dovi_rpu.c
@@ -149,7 +149,7 @@ static inline uint64_t get_ue_coef(GetBitContext *gb, const AVDOVIRpuDataHeader
case RPU_COEFF_FLOAT:
fpart.u32 = get_bits_long(gb, 32);
- return fpart.f32 * (1 << hdr->coef_log2_denom);
+ return fpart.f32 * (1LL << hdr->coef_log2_denom);
}
return 0; /* unreachable */
@@ -168,7 +168,7 @@ static inline int64_t get_se_coef(GetBitContext *gb, const AVDOVIRpuDataHeader *
case RPU_COEFF_FLOAT:
fpart.u32 = get_bits_long(gb, 32);
- return fpart.f32 * (1 << hdr->coef_log2_denom);
+ return fpart.f32 * (1LL << hdr->coef_log2_denom);
}
return 0; /* unreachable */