summaryrefslogtreecommitdiff
path: root/libavcodec
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2017-03-11 03:38:01 +0100
committerMichael Niedermayer <michael@niedermayer.cc>2017-03-12 04:38:14 +0100
commitf4c2302ee24d8a6a31226acca48fe9caed597a8c (patch)
treeb495a58eb291fe8c32bd4f4b0bfe452b5a4a10a1 /libavcodec
parent47cc9c1d77f5362e1ba8cee604cb0853d3576b0b (diff)
avcodec/dca_xll: Fix runtime error: signed integer overflow: 1762028192 + 698372290 cannot be represented in type 'int'
Fixes: 762/clusterfuzz-testcase-5927683747741696 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec')
-rw-r--r--libavcodec/dca_xll.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/dca_xll.c b/libavcodec/dca_xll.c
index 6cebda35e4..b7331e04b9 100644
--- a/libavcodec/dca_xll.c
+++ b/libavcodec/dca_xll.c
@@ -658,7 +658,7 @@ static void chs_filter_band_data(DCAXllDecoder *s, DCAXllChSet *c, int band)
// Inverse fixed coefficient prediction
for (j = 0; j < b->fixed_pred_order[i]; j++)
for (k = 1; k < nsamples; k++)
- buf[k] += buf[k - 1];
+ buf[k] += (unsigned)buf[k - 1];
}
}