aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/libgsmdec.c
diff options
context:
space:
mode:
authorGanesh Ajjanagadde <gajjanagadde@gmail.com>2015-10-28 22:02:25 -0400
committerGanesh Ajjanagadde <gajjanagadde@gmail.com>2015-10-29 19:13:55 -0400
commitb7fb7c4542af63fea433a5417e4efe2d8c4422f6 (patch)
treeebbe048936a46c4423bde5d95af1694863ab1004 /libavcodec/libgsmdec.c
parent0fe5dcd66041183c2ada3847b968c425f104b0c5 (diff)
downloadffmpeg-b7fb7c4542af63fea433a5417e4efe2d8c4422f6.tar.gz
avutil/mathematics: make av_gcd more robust
This ensures that no undefined behavior is invoked, while retaining identical return values in all cases and at no loss of performance (identical asm on clang and gcc). Essentially, this patch exchanges undefined behavior with implementation defined behavior, a strict improvement. Rationale: 1. The ideal solution is to have the return type a uint64_t. This unfortunately requires an API change. 2. The only pathological behavior happens if both arguments are INT64_MIN, to the best of my knowledge. In such a case, the implementation defined behavior is invoked in the sense that UINT64_MAX is interpreted as INT64_MIN, which any reasonable implementation will do. In any case, any usage where both arguments are INT64_MIN is a fuzzer anyway. 3. Alternatives of checking, etc require branching and lose performance for no concrete gain - no client cares about av_gcd's actual value when both args are INT64_MIN. Even if it did, on sane platforms (e.g all the ones FFmpeg cares about), it produces a correct gcd, namely INT64_MIN. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Ganesh Ajjanagadde <gajjanagadde@gmail.com>
Diffstat (limited to 'libavcodec/libgsmdec.c')
0 files changed, 0 insertions, 0 deletions