From bd8b6ed96df58bf3ea22c987f461728543219979 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 4 Jul 2014 14:37:01 +0200 Subject: [PATCH] avcodec/bmp: fix integer overflow in checking header sizes Signed-off-by: Michael Niedermayer --- libavcodec/bmp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/bmp.c b/libavcodec/bmp.c index 47ff978632..7443fa9772 100644 --- a/libavcodec/bmp.c +++ b/libavcodec/bmp.c @@ -70,7 +70,7 @@ static int bmp_decode_frame(AVCodecContext *avctx, hsize = bytestream_get_le32(&buf); /* header size */ ihsize = bytestream_get_le32(&buf); /* more header size */ - if (ihsize + 14 > hsize) { + if (ihsize + 14LL > hsize) { av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize); return AVERROR_INVALIDDATA; }