[FFmpeg-trac] #8151(undetermined:new): signed integer overflow in libavformat/aiffdec.c

[FFmpeg]

#8151: signed integer overflow in libavformat/aiffdec.c
-------------------------------------+-------------------------------------
             Reporter:  Suhwan       |                     Type:  defect
               Status:  new          |                 Priority:  normal
            Component:               |                  Version:  git-
  undetermined                       |  master
             Keywords:  ubsan        |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
 Summary of the bug:
 There're two signed integer overflow in libavformat/aiffdec.c

 {{{
 libavformat/aiffdec.c:245:26: runtime error: signed integer overflow:
 2147483647 + 8 cannot be represented in type 'int'
 SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior
 libavformat/aiffdec.c:245:26 in
 libavformat/aiffdec.c:245:18: runtime error: signed integer overflow: 8 -
 -2147483641 cannot be represented in type 'int'
 SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior
 libavformat/aiffdec.c:245:18 in
 }}}
 How to reproduce:
 {{{
 % ./ffmpeg_g -t 2 -y -r 99 -i sample.PCM.8bit.8000Hz.Stereo.aif -loglevel
 99 -map 0 -c copy -c: s:9 pcm_vidc -disposition: v:106 aptx_hd -r 36 -ar
 48000 -ac 12 -strict 2 output/tmp.nsp

 ffmpeg version N-94887-ge55018ee11 (git master)
 built on ubuntu 18.04 with clang-6 and ASAN and UBSAN option.
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/8151>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker