diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-10 18:51:58 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-14 12:20:16 +0200 |
| commit | d6c2b08e733bb7ab010f18d1f17f2c0874f895ca (patch) | |
| tree | 7e841ddf8fb26d077283ebeb8b8bd2cc630c3ee9 | |
| parent | a4fb44723dcaa56416173bc3d0ff41e9cda25067 (diff) | |
| download | ffmpeg-d6c2b08e733bb7ab010f18d1f17f2c0874f895ca.tar.gz | |
avcodec/dss_sp: Fix runtime error: signed integer overflow: 2147481189 + 4096 cannot be represented in type 'int'
Fixes: 1441/clusterfuzz-testcase-minimized-6223152357048320
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 6ea428789371fa0601e9ebb5b7f2216d4e73e831)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/dss_sp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/dss_sp.c b/libavcodec/dss_sp.c index 2100936e51..14025fcdde 100644 --- a/libavcodec/dss_sp.c +++ b/libavcodec/dss_sp.c @@ -529,7 +529,7 @@ static void dss_sp_shift_sq_sub(const int32_t *filter_buf, for (i = 14; i > 0; i--) error_buf[i] = error_buf[i - 1]; - tmp = (tmp + 4096) >> 13; + tmp = (int)(tmp + 4096U) >> 13; error_buf[1] = tmp; |