diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-02-19 18:47:13 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-02-19 19:48:57 +0100 |
| commit | 706757d26dd5e606c1745a4bb53fe45f6d6493cf (patch) | |
| tree | e4b364658c1003c4ea22dade19d5e0d7750c077a /libavcodec/mpeg12dec.c | |
| parent | a9f3e4b138fc14f7512fde821c051fe1ff7f124f (diff) | |
| download | ffmpeg-706757d26dd5e606c1745a4bb53fe45f6d6493cf.tar.gz | |
avcodec/mpeg12dec: Fix runtime error: left shift of negative value
Fixes: 608/clusterfuzz-testcase-603978286392934
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mpeg12dec.c')
| -rw-r--r-- | libavcodec/mpeg12dec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavcodec/mpeg12dec.c b/libavcodec/mpeg12dec.c index f3cf6eb0bf..5f86029660 100644 --- a/libavcodec/mpeg12dec.c +++ b/libavcodec/mpeg12dec.c @@ -865,8 +865,8 @@ static int mpeg_decode_mb(MpegEncContext *s, int16_t block[12][64]) s->last_mv[i][0][1]); /* full_pel: only for MPEG-1 */ if (s->full_pel[i]) { - s->mv[i][0][0] <<= 1; - s->mv[i][0][1] <<= 1; + s->mv[i][0][0] *= 2; + s->mv[i][0][1] *= 2; } } } |