diff mbox

[FFmpeg-devel,1/3] avcodec/wavpack: Fix runtime error: signed integer overflow: -2147483648 + -83886075 cannot be represented in type 'int'

Message ID 20170311031125.10925-1-michael@niedermayer.cc
State Accepted
Commit 47cc9c1d77f5362e1ba8cee604cb0853d3576b0b
Headers show

Commit Message

Michael Niedermayer March 11, 2017, 3:11 a.m. UTC
Fixes: 761/clusterfuzz-testcase-5442222252097536

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
---
 libavcodec/wavpack.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comments

Michael Niedermayer March 12, 2017, 2:10 a.m. UTC | #1
On Sat, Mar 11, 2017 at 04:11:23AM +0100, Michael Niedermayer wrote:
> Fixes: 761/clusterfuzz-testcase-5442222252097536
> 
> Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
> ---
>  libavcodec/wavpack.h | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)

patchset applied

[...]
diff mbox

Patch

diff --git a/libavcodec/wavpack.h b/libavcodec/wavpack.h
index 0196574aab..445d593c3b 100644
--- a/libavcodec/wavpack.h
+++ b/libavcodec/wavpack.h
@@ -99,8 +99,8 @@  typedef struct WvChannel {
 
 // macros for manipulating median values
 #define GET_MED(n) ((c->median[n] >> 4) + 1)
-#define DEC_MED(n) c->median[n] -= ((c->median[n] + (128 >> (n)) - 2) / (128 >> (n))) * 2
-#define INC_MED(n) c->median[n] += ((c->median[n] + (128 >> (n))    ) / (128 >> (n))) * 5
+#define DEC_MED(n) c->median[n] -= ((c->median[n] + (128 >> (n)) - 2) / (128 >> (n))) * 2U
+#define INC_MED(n) c->median[n] += ((c->median[n] + (128 >> (n))    ) / (128 >> (n))) * 5U
 
 // macros for applying weight
 #define UPDATE_WEIGHT_CLIP(weight, delta, samples, in) \