aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2019-08-17 19:25:01 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2020-01-06 11:30:43 +0100
commite1a3eda6ccc20e4014d67a21d23be36989f92f67 (patch)
tree94e64097d2af295afca16398462694bd91552733
parent544ad51ad6c3f1a4de15c3a508615a65b83ad797 (diff)
downloadffmpeg-e1a3eda6ccc20e4014d67a21d23be36989f92f67.tar.gz
avcodec/ralf: fix undefined shift in extend_code()
Fixes: left shift of negative value -3 Fixes: 16147/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_RALF_fuzzer-5658392722407424 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 4778407ab3b545c40def7e95a8f9dd4ae92a4e8e) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
-rw-r--r--libavcodec/ralf.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/ralf.c b/libavcodec/ralf.c
index d2d803b0d4..75c9371b95 100644
--- a/libavcodec/ralf.c
+++ b/libavcodec/ralf.c
@@ -220,7 +220,7 @@ static inline int extend_code(GetBitContext *gb, int val, int range, int bits)
val -= range;
}
if (bits)
- val = (val << bits) | get_bits(gb, bits);
+ val = ((unsigned)val << bits) | get_bits(gb, bits);
return val;
}