Message ID | 20240326001151.12083-2-michael@niedermayer.cc |
---|---|
State | Accepted |
Commit | 746203af3116288b1dd4442e46a5724ba759e831 |
Headers | show |
Series | [FFmpeg-devel,01/10] avformat/concatdec: Check user_duration sum | expand |
Context | Check | Description |
---|---|---|
andriy/configure_x86 | warning | Failed to apply patch |
yinshiyou/configure_loongarch64 | warning | Failed to apply patch |
diff --git a/libavformat/jacosubdec.c b/libavformat/jacosubdec.c index 447397b6a77..dabb298a264 100644 --- a/libavformat/jacosubdec.c +++ b/libavformat/jacosubdec.c @@ -150,7 +150,7 @@ static int get_shift(unsigned timeres, const char *buf) } ret = (int64_t)h*3600 + (int64_t)m*60 + s; - if (FFABS(ret) > (INT64_MAX - FFABS(d)) / timeres) + if (FFABS(ret) > (INT64_MAX - FFABS((int64_t)d)) / timeres) return 0; ret = sign * (ret * timeres + d);
Fixes: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself Fixes: 62276/clusterfuzz-testcase-minimized-ffmpeg_dem_JACOSUB_fuzzer-5401294942371840 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> --- libavformat/jacosubdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)