1. ffmpeg
  2. Commit 4c472c52525fcab4c80cdbc98b4625d318c84fcb
Browse code

avcodec/ra144: Fix runtime error: signed integer overflow: 11184810 * 404 cannot be represented in type 'int'

Fixes: 1884/clusterfuzz-testcase-minimized-4637425835966464

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

Michael Niedermayer authored on 2017/05/29 04:38:24
Showing 1 changed files
libavcodec/ra144.c
History View file @ 4c472c5
... ... 
@@ -1701,7 +1701,7 @@ void ff_subblock_synthesis(RA144Context *ractx, const int16_t *lpc_coefs,
1701 1701 
     if (cba_idx) {
1702 1702 
         cba_idx += BLOCKSIZE/2 - 1;
1703 1703 
         ff_copy_and_dup(ractx->buffer_a, ractx->adapt_cb, cba_idx);
1704 
-        m[0] = (ff_irms(&ractx->adsp, ractx->buffer_a) * gval) >> 12;
1704 
+        m[0] = (ff_irms(&ractx->adsp, ractx->buffer_a) * (unsigned)gval) >> 12;
1705 1705 
     } else {
1706 1706 
         m[0] = 0;
1707 1707 
     }