Fixes: 1655/clusterfuzz-testcase-minimized-5587079276789760
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
{
int mul = dir ? -r->mv_weight2 : r->mv_weight1;
- return (val * mul + 0x2000) >> 14;
+ return (int)(val * (SUINT)mul + 0x2000) >> 14;
}
/**
r->mv_weight1 = r->mv_weight2 = r->weight1 = r->weight2 = 8192;
r->scaled_weight = 0;
}else{
+ if (FFMAX(dist0, dist1) > refdist)
+ av_log(avctx, AV_LOG_TRACE, "distance overflow\n");
+
r->mv_weight1 = (dist0 << 14) / refdist;
r->mv_weight2 = (dist1 << 14) / refdist;
if((r->mv_weight1|r->mv_weight2) & 511){