diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2012-10-20 19:08:41 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2012-10-20 20:13:18 +0200 |
| commit | 830f7f189f7b41221b29d40e8127cf54a140ae86 (patch) | |
| tree | 7cd441be13d11e3c203bce53aa70f881f8fac6a1 /libavformat/mmsh.c | |
| parent | d3b8d56e0625123b7e7332b1f97f4e84195a95e2 (diff) | |
| download | ffmpeg-830f7f189f7b41221b29d40e8127cf54a140ae86.tar.gz | |
mmsh: fix integer overflow in mmsh_seek()
Fixes CID703745
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavformat/mmsh.c')
| -rw-r--r-- | libavformat/mmsh.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/mmsh.c b/libavformat/mmsh.c index d6e398200f..86a0575e59 100644 --- a/libavformat/mmsh.c +++ b/libavformat/mmsh.c @@ -394,7 +394,7 @@ static int64_t mmsh_seek(URLContext *h, int64_t pos, int whence) MMSContext *mms = &mmsh->mms; if(pos == 0 && whence == SEEK_CUR) - return mms->asf_header_read_size + mms->remaining_in_len + mmsh->chunk_seq * mms->asf_packet_len; + return mms->asf_header_read_size + mms->remaining_in_len + mmsh->chunk_seq * (int64_t)mms->asf_packet_len; return AVERROR(ENOSYS); } |