Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/FFmpeg/FFmpeg.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2017-04-27 03:27:16 +0300
committerMichael Niedermayer <michael@niedermayer.cc>2017-04-27 05:25:31 +0300
commit6ca82975b7a8eaf676a52738ec8e7e36732327cc (patch)
treed18767a836061492158191275485f40352bcfa0c /libavcodec/mdec.c
parent966cbfbc83db34f50616fe582d1a53f81d292282 (diff)
avcodec/mdec: Fix runtime error: left shift of negative value -127
Fixes undefined behavior Fixes: 1275/clusterfuzz-testcase-minimized-6718162017976320 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/mdec.c')
-rw-r--r--libavcodec/mdec.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/mdec.c b/libavcodec/mdec.c
index 1cc4ca4742..42bd561cd7 100644
--- a/libavcodec/mdec.c
+++ b/libavcodec/mdec.c
@@ -73,7 +73,7 @@ static inline int mdec_decode_block_intra(MDECContext *a, int16_t *block, int n)
if (diff >= 0xffff)
return AVERROR_INVALIDDATA;
a->last_dc[component] += diff;
- block[0] = a->last_dc[component] << 3;
+ block[0] = a->last_dc[component] * (1 << 3);
}
i = 0;