summaryrefslogtreecommitdiff
path: root/libavcodec/bmp.c
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2014-07-04 14:37:01 +0200
committerMichael Niedermayer <michaelni@gmx.at>2014-07-04 15:02:08 +0200
commitbd8b6ed96df58bf3ea22c987f461728543219979 (patch)
tree0334bbb8b0795b3e8cc0fa673be13650f9f63df9 /libavcodec/bmp.c
parentc277ab6b78892bcd748b3e9d8cd4891b3764a025 (diff)
avcodec/bmp: fix integer overflow in checking header sizes
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/bmp.c')
-rw-r--r--libavcodec/bmp.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/bmp.c b/libavcodec/bmp.c
index 47ff978632..7443fa9772 100644
--- a/libavcodec/bmp.c
+++ b/libavcodec/bmp.c
@@ -70,7 +70,7 @@ static int bmp_decode_frame(AVCodecContext *avctx,
hsize = bytestream_get_le32(&buf); /* header size */
ihsize = bytestream_get_le32(&buf); /* more header size */
- if (ihsize + 14 > hsize) {
+ if (ihsize + 14LL > hsize) {
av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize);
return AVERROR_INVALIDDATA;
}