diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-22 21:43:01 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-22 21:43:39 +0200 |
| commit | 0ce7cf0c86a2744ddfe21cb0983ff572ed07ab69 (patch) | |
| tree | 4f3cce3cfb2cae961cd3ddd6eb4f603c6770e9c1 /libavcodec/takdec.c | |
| parent | 64d0dad93c18a517e92d152fdf7cbf92f1cf0a68 (diff) | |
| download | ffmpeg-0ce7cf0c86a2744ddfe21cb0983ff572ed07ab69.tar.gz | |
avcodec/takdec: Fix runtime error: left shift of negative value -360
Fixes: 1739/clusterfuzz-testcase-minimized-5399237707694080
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/takdec.c')
| -rw-r--r-- | libavcodec/takdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/takdec.c b/libavcodec/takdec.c index 081b2f203b..78e82a9d41 100644 --- a/libavcodec/takdec.c +++ b/libavcodec/takdec.c @@ -653,7 +653,7 @@ static int decorrelate(TAKDecContext *s, int c1, int c2, int length) s->residues[i ] * s->filter[0]; } - v = (av_clip_intp2(v >> 10, 13) << dshift) - *p1; + v = av_clip_intp2(v >> 10, 13) * (1 << dshift) - *p1; *p1++ = v; } |