From d1916d13e28b87f4b1b214231149e12e1d536b4b Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Fri, 30 Aug 2013 23:14:32 +0200
Subject: dsputil/pngdsp: fix signed/unsigned type in end comparison

Fixes out of array accesses and integer overflows.
---
 libavcodec/pngdsp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'libavcodec/pngdsp.c')

diff --git a/libavcodec/pngdsp.c b/libavcodec/pngdsp.c
index afd9093174..5cc41c4e80 100644
--- a/libavcodec/pngdsp.c
+++ b/libavcodec/pngdsp.c
@@ -31,7 +31,7 @@
 static void add_bytes_l2_c(uint8_t *dst, uint8_t *src1, uint8_t *src2, int w)
 {
     long i;
-    for (i = 0; i <= w - sizeof(long); i += sizeof(long)) {
+    for (i = 0; i <= w - (int)sizeof(long); i += sizeof(long)) {
         long a = *(long *)(src1 + i);
         long b = *(long *)(src2 + i);
         *(long *)(dst + i) = ((a & pb_7f) + (b & pb_7f)) ^ ((a ^ b) & pb_80);
-- 
cgit v1.2.3