]> git.sesse.net Git - ffmpeg/commit
avcodec/truemotion2: Fix multiple integer overflows in tm2_null_res_block()
authorMichael Niedermayer <michael@niedermayer.cc>
Thu, 15 Aug 2019 21:22:50 +0000 (23:22 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sat, 31 Aug 2019 16:34:05 +0000 (18:34 +0200)
commitcc78783ce5e8837d4f4ca43eedf2d299651e65ff
tree5f1a1a18e9ed1c4d3ca0ac406a2887cb245fbbe1
parent5a3dee65d4fade2172c1e83da9cea3e3ae665897
avcodec/truemotion2: Fix multiple integer overflows in tm2_null_res_block()

Fixes: signed integer overflow: 1795032576 + 598344192 cannot be represented in type 'int'
Fixes: 16196/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_TRUEMOTION2_fuzzer-5636723419119616
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/truemotion2.c