[FFmpeg-devel] [PATCH] Fix signed integer overflow undefined behavior

Nikolas Bowe nbowe at google.com
Sat Jan 20 00:48:08 EET 2018


Found via fuzzing
---
 libavformat/rpl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/rpl.c b/libavformat/rpl.c
index d373600478..df449bfc29 100644
--- a/libavformat/rpl.c
+++ b/libavformat/rpl.c
@@ -194,7 +194,7 @@ static int rpl_read_header(AVFormatContext *s)
         if (ast->codecpar->bits_per_coded_sample == 0)
             ast->codecpar->bits_per_coded_sample = 4;
 
-        ast->codecpar->bit_rate = ast->codecpar->sample_rate *
+        ast->codecpar->bit_rate = (uint64_t)ast->codecpar->sample_rate *
                                   ast->codecpar->bits_per_coded_sample *
                                   ast->codecpar->channels;
 
-- 
2.16.0.rc1.238.g530d649a79-goog



More information about the ffmpeg-devel mailing list