You've already forked FFmpeg
							
							
				mirror of
				https://github.com/FFmpeg/FFmpeg.git
				synced 2025-10-30 23:18:11 +02:00 
			
		
		
		
	avcodec/wmalosslessdec: Fixes undefined overflow in dequantization in decode_subframe()
Fixes: signed integer overflow: 47875596 * 45 cannot be represented in type 'int' Fixes: 19082/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer-5687766512041984 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
		| @@ -979,7 +979,7 @@ static int decode_subframe(WmallDecodeCtx *s) | ||||
|         if (s->quant_stepsize != 1) | ||||
|             for (i = 0; i < s->num_channels; i++) | ||||
|                 for (j = 0; j < subframe_len; j++) | ||||
|                     s->channel_residues[i][j] *= s->quant_stepsize; | ||||
|                     s->channel_residues[i][j] *= (unsigned)s->quant_stepsize; | ||||
|     } | ||||
|  | ||||
|     /* Write to proper output buffer depending on bit-depth */ | ||||
|   | ||||
		Reference in New Issue
	
	Block a user