RepoMirrors/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2025-01-16 20:31:32 +00:00
Code Issues Projects Releases Wiki Activity

avcodec/bonk: Check step against overflow

Browse Source 
No testcase

Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2022-11-06 11:26:51 +01:00
parent 9f00286c4c
commit 3263185225
No known key found for this signature in database
GPG Key ID: B18E8928B3948D64
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libavcodec/bonk.c
View File

@ -180,6 +180,8 @@ static int intlist_read(BonkContext *s, int *buf, int entries, int base_2_part)
if (!dominant) if (!dominant)
n_zeros += steplet; n_zeros += steplet;
if (step > INT32_MAX*8LL/9 + 1)
return AVERROR_INVALIDDATA;
step += step / 8; step += step / 8;
} else if (steplet > 0) { } else if (steplet > 0) {
int actual_run = read_uint_max(s, steplet - 1); int actual_run = read_uint_max(s, steplet - 1);