From f4c2302ee24d8a6a31226acca48fe9caed597a8c Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michael@niedermayer.cc>
Date: Sat, 11 Mar 2017 03:38:01 +0100
Subject: [PATCH] avcodec/dca_xll: Fix runtime error: signed integer overflow:
1762028192 + 698372290 cannot be represented in type 'int'
Fixes: 762/clusterfuzz-testcase-5927683747741696
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
---
libavcodec/dca_xll.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavcodec/dca_xll.c b/libavcodec/dca_xll.c
index 6cebda35e4b..b7331e04b94 100644
--- a/libavcodec/dca_xll.c
+++ b/libavcodec/dca_xll.c
@@ -658,7 +658,7 @@ static void chs_filter_band_data(DCAXllDecoder *s, DCAXllChSet *c, int band)
// Inverse fixed coefficient prediction
for (j = 0; j < b->fixed_pred_order[i]; j++)
for (k = 1; k < nsamples; k++)
- buf[k] += buf[k - 1];
+ buf[k] += (unsigned)buf[k - 1];
}
}
--
GitLab