diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-11-10 00:04:51 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2020-11-13 18:01:54 +0100 |
| commit | c7e775f7126562ae8cfe1411022efa000b572f01 (patch) | |
| tree | 386b78c97acac52e21680f86d27271c6825515d0 | |
| parent | b33233bd53f74f94f4cd7be0645a99a9549a913e (diff) | |
| download | ffmpeg-c7e775f7126562ae8cfe1411022efa000b572f01.tar.gz | |
avcodec/vp3dsp: Use unsigned constant to avoid undefined integer overflow in ff_vp3dsp_set_bounding_values()
Fixes: signed integer overflow: 64 * 33686018 cannot be represented in type 'int'
Fixes: 26911/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_THEORA_fuzzer-4904975073017856
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Peter Ross <pross@xvid.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/vp3dsp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/vp3dsp.c b/libavcodec/vp3dsp.c index f485fba1f6..ec859a679d 100644 --- a/libavcodec/vp3dsp.c +++ b/libavcodec/vp3dsp.c @@ -490,5 +490,5 @@ void ff_vp3dsp_set_bounding_values(int * bounding_values_array, int filter_limit } if (value) bounding_values[128] = value; - bounding_values[129] = bounding_values[130] = filter_limit * 0x02020202; + bounding_values[129] = bounding_values[130] = filter_limit * 0x02020202U; } |