mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
avcodec/bmp: fix integer overflow in checking header sizes
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
c277ab6b78
commit
bd8b6ed96d
@ -70,7 +70,7 @@ static int bmp_decode_frame(AVCodecContext *avctx,
|
|||||||
|
|
||||||
hsize = bytestream_get_le32(&buf); /* header size */
|
hsize = bytestream_get_le32(&buf); /* header size */
|
||||||
ihsize = bytestream_get_le32(&buf); /* more header size */
|
ihsize = bytestream_get_le32(&buf); /* more header size */
|
||||||
if (ihsize + 14 > hsize) {
|
if (ihsize + 14LL > hsize) {
|
||||||
av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize);
|
av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize);
|
||||||
return AVERROR_INVALIDDATA;
|
return AVERROR_INVALIDDATA;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user