diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-10-23 00:24:01 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2021-09-10 16:04:26 +0200 |
| commit | 6718c814aa1dbf6c071e499b59f436948a13fe0c (patch) | |
| tree | f282b9959506a70e873526d3ecd8413dfe152926 /libavutil/integer.c | |
| parent | 071ae40ee3c38883f3b4f2f054cf5813e648561a (diff) | |
| download | ffmpeg-6718c814aa1dbf6c071e499b59f436948a13fe0c.tar.gz | |
avcodec/hevc_cabac: Limit value in coeff_abs_level_remaining_decode() tighter
The max depth is 16bps, the max allowed coefficient depth is depth+6
Fixes: signed integer overflow: 1074266112 + 1073725439 cannot be represented in type 'int'
Fixes: 26493/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5657763331702784
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 7cf852b03c3ae6b61f89614371d2cb308d0b7f86)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavutil/integer.c')
0 files changed, 0 insertions, 0 deletions