diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2021-10-31 00:11:23 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2022-04-09 22:19:40 +0200 |
| commit | 9a44dc209bf4034190cb66ed58c60d0561163e7a (patch) | |
| tree | 067339e4653c9bb898a475338b22880e24ecbbe9 | |
| parent | 8876c70ee82181a9f5c46415ed499dad4b08e82d (diff) | |
| download | ffmpeg-9a44dc209bf4034190cb66ed58c60d0561163e7a.tar.gz | |
avformat/aiffdec: Use av_rescale() for bitrate
Fixes: integer overflow
Fixes: 40313/clusterfuzz-testcase-minimized-ffmpeg_dem_AIFF_fuzzer-4814761406103552
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 905588df975071c03c00b2e923c311b4de65a8f4)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/aiffdec.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/libavformat/aiffdec.c b/libavformat/aiffdec.c index 6a5a2a3f5b..1040f3257d 100644 --- a/libavformat/aiffdec.c +++ b/libavformat/aiffdec.c @@ -186,8 +186,10 @@ static int get_aiff_header(AVFormatContext *s, int size, par->block_align = (av_get_bits_per_sample(par->codec_id) * par->channels) >> 3; if (aiff->block_duration) { - par->bit_rate = (int64_t)par->sample_rate * (par->block_align << 3) / - aiff->block_duration; + par->bit_rate = av_rescale(par->sample_rate, par->block_align * 8LL, + aiff->block_duration); + if (par->bit_rate < 0) + par->bit_rate = 0; } /* Chunk is over */ |