]> git.sesse.net Git - ffmpeg/commit
avcodec/truemotion2: Fix integer overflow in tm2_decode_blocks()
authorMichael Niedermayer <michael@niedermayer.cc>
Tue, 26 Mar 2019 23:39:56 +0000 (00:39 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Sat, 13 Apr 2019 20:04:18 +0000 (22:04 +0200)
commit0ad0533e914a2618aea1dc77748037bd8459f61d
tree4abd12d15ebc3525ef51336fe0ea938c52bd016a
parenta208c277f811a8495699b1f9b5770d6ace5582d4
avcodec/truemotion2: Fix integer overflow in tm2_decode_blocks()

Fixes: signed integer overflow: 255 + 2147483634 cannot be represented in type 'int'
Fixes: 13472/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2_fuzzer-5712444142387200
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/truemotion2.c