diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-10 18:51:58 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-20 03:41:33 +0200 |
| commit | 507ed0ab526cc26329f13f8e478ff0f966b7f716 (patch) | |
| tree | 304cddbd9762a25d08d4969bd384247926dffad5 | |
| parent | 37f59340bb5616bc7e5abc2fec45f1b8af453b79 (diff) | |
| download | ffmpeg-507ed0ab526cc26329f13f8e478ff0f966b7f716.tar.gz | |
avcodec/dss_sp: Fix runtime error: signed integer overflow: 2147481189 + 4096 cannot be represented in type 'int'
Fixes: 1441/clusterfuzz-testcase-minimized-6223152357048320
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 6ea428789371fa0601e9ebb5b7f2216d4e73e831)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/dss_sp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/dss_sp.c b/libavcodec/dss_sp.c index 3187a76eec..f5dfda3642 100644 --- a/libavcodec/dss_sp.c +++ b/libavcodec/dss_sp.c @@ -529,7 +529,7 @@ static void dss_sp_shift_sq_sub(const int32_t *filter_buf, for (i = 14; i > 0; i--) error_buf[i] = error_buf[i - 1]; - tmp = (tmp + 4096) >> 13; + tmp = (int)(tmp + 4096U) >> 13; error_buf[1] = tmp; |