aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/dxtory.c
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2020-09-25 20:08:37 +0200
committerMichael Niedermayer <michael@niedermayer.cc>2020-09-26 19:32:42 +0200
commitabebd87764992dc22c82802bdc75d40aac14ab86 (patch)
tree85fa6408a674a134d6070ba7b136c800e8bce2ca /libavcodec/dxtory.c
parentc3d1c7f903892455161fa1f722e01a7eaf2c6451 (diff)
downloadffmpeg-abebd87764992dc22c82802bdc75d40aac14ab86.tar.gz
avcodec/dxtory: Fix negative shift in dx2_decode_slice_410()
Fixes: left shift of negative value -768 Fixes: 25574/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXTORY_fuzzer-6012596027916288 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/dxtory.c')
-rw-r--r--libavcodec/dxtory.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/dxtory.c b/libavcodec/dxtory.c
index a82532c467..bc95e0e7e1 100644
--- a/libavcodec/dxtory.c
+++ b/libavcodec/dxtory.c
@@ -637,7 +637,7 @@ static int dx2_decode_slice_410(GetBitContext *gb, AVFrame *frame,
V[huvborder] = decode_sym(gb, lru[2]) ^ 0x80;
}
- Y += ystride << 2;
+ Y += ystride * 4;
U += ustride;
V += vstride;
}