virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2024-11-26 19:01:44 +02:00
Code Issues Releases Activity

avcodec/mobiclip: Avoid undefined integer overflow in MV computation

Browse Source 
Fixes: signed integer overflow: 1 + 2147483647 cannot be represented in type 'int'
Fixes: 30877/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer-4775601145774080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2021-03-02 00:19:21 +01:00
parent 53d739db4e
commit 4dc039b4c7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/mobiclip.c
View File

@ -1091,8 +1091,8 @@ static int predict_motion(AVCodecContext *avctx,
sidx += 6;
if (index > 0) {
mv.x = mv.x + get_se_golomb(gb);
mv.y = mv.y + get_se_golomb(gb);
mv.x = mv.x + (unsigned)get_se_golomb(gb);
mv.y = mv.y + (unsigned)get_se_golomb(gb);
}
if (mv.x >= INT_MAX || mv.y >= INT_MAX)
return AVERROR_INVALIDDATA;