diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2021-10-31 00:11:23 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-11-01 20:37:20 +0100 |
| commit | 905588df975071c03c00b2e923c311b4de65a8f4 (patch) | |
| tree | 8415e0d5ee6f2c9b13d25fdc16290c1438773ff2 /libavformat | |
| parent | 93f7776921ed8c5219732210067016c3457e864d (diff) | |
| download | ffmpeg-905588df975071c03c00b2e923c311b4de65a8f4.tar.gz | |
avformat/aiffdec: Use av_rescale() for bitrate
Fixes: integer overflow
Fixes: 40313/clusterfuzz-testcase-minimized-ffmpeg_dem_AIFF_fuzzer-4814761406103552
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat')
| -rw-r--r-- | libavformat/aiffdec.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/libavformat/aiffdec.c b/libavformat/aiffdec.c index 648f231a52..7a995c00a6 100644 --- a/libavformat/aiffdec.c +++ b/libavformat/aiffdec.c @@ -185,8 +185,10 @@ static int get_aiff_header(AVFormatContext *s, int size, par->block_align = (av_get_bits_per_sample(par->codec_id) * par->channels) >> 3; if (aiff->block_duration) { - par->bit_rate = (int64_t)par->sample_rate * (par->block_align << 3) / - aiff->block_duration; + par->bit_rate = av_rescale(par->sample_rate, par->block_align * 8LL, + aiff->block_duration); + if (par->bit_rate < 0) + par->bit_rate = 0; } /* Chunk is over */ |