diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-02-25 02:19:43 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-02-25 02:20:35 +0100 |
| commit | 6bd79ba59f46a8b3133f28faae53b75540469803 (patch) | |
| tree | 8767f4b133c339385cafd56971810f45be6f8ada /libavcodec/amrwbdec.c | |
| parent | 310d2af319d9113263f75e94f5a1b211c05260b5 (diff) | |
| download | ffmpeg-6bd79ba59f46a8b3133f28faae53b75540469803.tar.gz | |
avcodec/amrwbdec: Fix 2 runtime errors: left shift of negative value -1
Fixes: 669/clusterfuzz-testcase-4847965409640448
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/amrwbdec.c')
| -rw-r--r-- | libavcodec/amrwbdec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavcodec/amrwbdec.c b/libavcodec/amrwbdec.c index 7d0c135c5e..999bfb99dc 100644 --- a/libavcodec/amrwbdec.c +++ b/libavcodec/amrwbdec.c @@ -292,7 +292,7 @@ static void decode_pitch_lag_low(int *lag_int, int *lag_frac, int pitch_index, if (subframe == 0 || (subframe == 2 && mode != MODE_6k60)) { if (pitch_index < 116) { *lag_int = (pitch_index + 69) >> 1; - *lag_frac = (pitch_index - (*lag_int << 1) + 68) << 1; + *lag_frac = (pitch_index - (*lag_int << 1) + 68) * 2; } else { *lag_int = pitch_index - 24; *lag_frac = 0; @@ -302,7 +302,7 @@ static void decode_pitch_lag_low(int *lag_int, int *lag_frac, int pitch_index, AMRWB_P_DELAY_MIN, AMRWB_P_DELAY_MAX - 15); } else { *lag_int = (pitch_index + 1) >> 1; - *lag_frac = (pitch_index - (*lag_int << 1)) << 1; + *lag_frac = (pitch_index - (*lag_int << 1)) * 2; *lag_int += *base_lag_int; } } |