summaryrefslogtreecommitdiff
path: root/libavformat/aiffdec.c
diff options
context:
space:
mode:
authorPaul B Mahol <onemda@gmail.com>2019-09-25 17:36:52 +0200
committerPaul B Mahol <onemda@gmail.com>2019-09-25 17:40:50 +0200
commitd58752bcb923f48d372c0377c07990dd6379a1a9 (patch)
tree4dcc5e88c32c5dabbabe7627ebc0c159138e80a3 /libavformat/aiffdec.c
parent121bf1b3b8de8de82856e42b8ed5156d4d78b637 (diff)
avformat/aiffdec: fix signed integer overflow
Fixes #8151
Diffstat (limited to 'libavformat/aiffdec.c')
-rw-r--r--libavformat/aiffdec.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/libavformat/aiffdec.c b/libavformat/aiffdec.c
index 61ef099f26..a42987c15f 100644
--- a/libavformat/aiffdec.c
+++ b/libavformat/aiffdec.c
@@ -243,7 +243,10 @@ static int aiff_read_header(AVFormatContext *s)
if (size < 0)
return size;
- filesize -= size + 8;
+ if (size >= 0x7fffffff - 8)
+ filesize = 0;
+ else
+ filesize -= size + 8;
switch (tag) {
case MKTAG('C', 'O', 'M', 'M'): /* Common chunk */