diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-12-11 01:06:46 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-02-21 22:50:52 +0100 |
| commit | f569ac4ce0514bf4e0dd768c5ed007c82548d326 (patch) | |
| tree | 0b61c7af1afc0cfc0aa4f006bec9bb17f9ad2752 | |
| parent | ee040a7fc23b9dbd8db6c4291e43c653d61325fe (diff) | |
| download | ffmpeg-f569ac4ce0514bf4e0dd768c5ed007c82548d326.tar.gz | |
avformat/microdvddec: use 64bit for durations
Fixes: signed integer overflow: 7 - -2147483647 cannot be represented in type 'int'
Fixes: 28036/clusterfuzz-testcase-minimized-ffmpeg_dem_MICRODVD_fuzzer-5171698751766528
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/microdvddec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/microdvddec.c b/libavformat/microdvddec.c index 1f871b2518..ecebff101c 100644 --- a/libavformat/microdvddec.c +++ b/libavformat/microdvddec.c @@ -65,12 +65,12 @@ static int64_t get_pts(const char *buf) return AV_NOPTS_VALUE; } -static int get_duration(const char *buf) +static int64_t get_duration(const char *buf) { int frame_start, frame_end; if (sscanf(buf, "{%d}{%d}", &frame_start, &frame_end) == 2) - return frame_end - frame_start; + return frame_end - (int64_t)frame_start; return -1; } |