av_log(avctx, AV_LOG_ERROR, "invalid number of channels\n");
return AVERROR(EINVAL);
}
- if (avctx->block_align < 1 || avctx->block_align % avctx->channels) {
+ if (avctx->block_align < 1 || avctx->block_align % avctx->channels ||
+ avctx->block_align > INT_MAX - avctx->channels
+ ) {
av_log(avctx, AV_LOG_ERROR, "invalid block align\n");
return AVERROR(EINVAL);
}
/* drop incomplete chunks */
buf_size = audio_chunks * s->chunk_size;
+ if (silent_chunks + audio_chunks >= INT_MAX / avctx->block_align)
+ return AVERROR_INVALIDDATA;
+
/* get output buffer */
frame->nb_samples = ((silent_chunks + audio_chunks) * avctx->block_align) /
avctx->channels;