You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-15 14:13:16 +02:00
avcodec/jpeg2000dwt: Fix integer overflow in dwt_decode97_int()
Fixes: runtime error: signed integer overflow: -163654656 * 256 cannot be represented in type 'int' Fixes: 2367/clusterfuzz-testcase-minimized-4648678897745920 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -488,7 +488,7 @@ static void dwt_decode97_int(DWTContext *s, int32_t *t)
|
|||||||
line += 5;
|
line += 5;
|
||||||
|
|
||||||
for (i = 0; i < w * h; i++)
|
for (i = 0; i < w * h; i++)
|
||||||
data[i] *= 1 << I_PRESHIFT;
|
data[i] *= 1LL << I_PRESHIFT;
|
||||||
|
|
||||||
for (lev = 0; lev < s->ndeclevels; lev++) {
|
for (lev = 0; lev < s->ndeclevels; lev++) {
|
||||||
int lh = s->linelen[lev][0],
|
int lh = s->linelen[lev][0],
|
||||||
|
Reference in New Issue
Block a user