From e5e422bcc3e6deee8c5c5bf8f5aeca2c051542f5 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 8 Jan 2013 02:43:14 +0100 Subject: [PATCH] mxfdec: Fix integer overflow with many channels Fixes division by zero Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Reviewed-by: Matthieu Bouron Signed-off-by: Michael Niedermayer --- libavformat/mxfdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/mxfdec.c b/libavformat/mxfdec.c index bb5f4a7808..648a579bef 100644 --- a/libavformat/mxfdec.c +++ b/libavformat/mxfdec.c @@ -2070,7 +2070,7 @@ static int mxf_set_audio_pts(MXFContext *mxf, AVCodecContext *codec, AVPacket *p pkt->pts = track->sample_count; if (codec->channels <= 0 || av_get_bits_per_sample(codec->codec_id) <= 0) return AVERROR(EINVAL); - track->sample_count += pkt->size / (codec->channels * av_get_bits_per_sample(codec->codec_id) / 8); + track->sample_count += pkt->size / (codec->channels * (int64_t)av_get_bits_per_sample(codec->codec_id) / 8); return 0; }