diff mbox series

[FFmpeg-devel,5/5] avcodec/exr: Fix preview overflow

Message ID 20240503215502.1509887-5-michael@niedermayer.cc
State Accepted
Commit 36126e4c142e43cc703f4b8c535d388ac5e403a4
Headers show
Series [FFmpeg-devel,1/5] avcodec/decode: decode_simple_internal() only implements audio and video | expand

Commit Message

Michael Niedermayer May 3, 2024, 9:55 p.m. UTC 
Fixes: CID1515456 Unintentional integer overflow

Sponsored-by: Sovereign Tech Fund
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
---
 libavcodec/exr.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/libavcodec/exr.c b/libavcodec/exr.c
index 8bd39f78a45..4bac0be89b2 100644
--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
@@ -1943,7 +1943,7 @@  static int decode_header(EXRContext *s, AVFrame *frame)
                                                      "preview", 16)) >= 0) {
             uint32_t pw = bytestream2_get_le32(gb);
             uint32_t ph = bytestream2_get_le32(gb);
-            uint64_t psize = pw * ph;
+            uint64_t psize = pw * (uint64_t)ph;
             if (psize > INT64_MAX / 4) {
                 ret = AVERROR_INVALIDDATA;
                 goto fail;