diff options
author | Michael Niedermayer <michael@niedermayer.cc> | 2018-10-24 01:44:12 +0200 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2018-11-18 02:35:03 +0100 |
commit | c2af767c3e288b63eab873e60c3376b0adcb0186 (patch) | |
tree | c5b29a7c1dc1f5162d4d24867bd38bfc836ba3ad | |
parent | e6f8f6a7eefd1fb29db17a86bba4434117eaab08 (diff) | |
download | ffmpeg-c2af767c3e288b63eab873e60c3376b0adcb0186.tar.gz |
avutil/integer: Fix integer overflow in av_mul_i()
Found-by: fate
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 3cc3cb663bf3061e40356392d2f7638de6a479fe)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r-- | libavutil/integer.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavutil/integer.c b/libavutil/integer.c index 6d6855fa1b..ba4aa778c9 100644 --- a/libavutil/integer.c +++ b/libavutil/integer.c @@ -74,7 +74,7 @@ AVInteger av_mul_i(AVInteger a, AVInteger b){ if(a.v[i]) for(j=i; j<AV_INTEGER_SIZE && j-i<=nb; j++){ - carry= (carry>>16) + out.v[j] + a.v[i]*b.v[j-i]; + carry= (carry>>16) + out.v[j] + a.v[i]*(unsigned)b.v[j-i]; out.v[j]= carry; } } |