diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2015-12-09 18:13:25 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-12-13 02:11:56 +0100 |
| commit | 537e901fe66c326f78e916ee9393830ee366131d (patch) | |
| tree | ac77dbdd432060243ea8d60b18a1f50f5470ed4f /libavformat/mxfenc.c | |
| parent | e6258677ee931912e32979964a5d848a274f9f07 (diff) | |
avformat/mxfenc: Fix integer overflow in length computation
Fixes: CID1341577
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/mxfenc.c')
| -rw-r--r-- | libavformat/mxfenc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/mxfenc.c b/libavformat/mxfenc.c index e4e42720fe..043daff73a 100644 --- a/libavformat/mxfenc.c +++ b/libavformat/mxfenc.c @@ -1268,11 +1268,11 @@ static void mxf_write_package(AVFormatContext *s, enum MXFMetadataSetType type, user_comment_count = mxf_write_user_comments(s, s->metadata); mxf_write_metadata_key(pb, 0x013600); PRINT_KEY(s, "Material Package key", pb->buf_ptr - 16); - klv_encode_ber_length(pb, 92 + name_size + (16*track_count) + (16*user_comment_count) + 12*mxf->store_user_comments); + klv_encode_ber_length(pb, 92 + name_size + (16*track_count) + (16*user_comment_count) + 12LL*mxf->store_user_comments); } else { mxf_write_metadata_key(pb, 0x013700); PRINT_KEY(s, "Source Package key", pb->buf_ptr - 16); - klv_encode_ber_length(pb, 112 + name_size + (16*track_count) + 12*mxf->store_user_comments); // 20 bytes length for descriptor reference + klv_encode_ber_length(pb, 112 + name_size + (16*track_count) + 12LL*mxf->store_user_comments); // 20 bytes length for descriptor reference } // write uid |