30 lines
1.2 KiB
Diff
30 lines
1.2 KiB
Diff
From 86f73277bf014e2ce36dd2594f1e0fb8b3bd6661 Mon Sep 17 00:00:00 2001
|
|
From: Michael Niedermayer <michael@niedermayer.cc>
|
|
Date: Tue, 26 Mar 2024 01:00:13 +0100
|
|
Subject: [PATCH] avformat/westwood_vqa: Fix 2g packets
|
|
|
|
Fixes: signed integer overflow: 2147483424 * 2 cannot be represented in type 'int'
|
|
Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-4576211411795968
|
|
|
|
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
|
|
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
|
|
---
|
|
libavformat/westwood_vqa.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/libavformat/westwood_vqa.c b/libavformat/westwood_vqa.c
|
|
index 954710a6f0..3a31e3f5e8 100644
|
|
--- a/libavformat/westwood_vqa.c
|
|
+++ b/libavformat/westwood_vqa.c
|
|
@@ -262,7 +262,7 @@ static int wsvqa_read_packet(AVFormatContext *s,
|
|
break;
|
|
case SND2_TAG:
|
|
/* 2 samples/byte, 1 or 2 samples per frame depending on stereo */
|
|
- pkt->duration = (chunk_size * 2) / wsvqa->channels;
|
|
+ pkt->duration = (chunk_size * 2LL) / wsvqa->channels;
|
|
break;
|
|
}
|
|
break;
|
|
--
|
|
2.33.0
|