[FFmpeg-devel] [PATCH] diracdec: avoid overflow of bytes*8 in decode_lowdelay

[Michael Niedermayer]

On Tue, May 05, 2015 at 10:10:44PM +0200, Andreas Cadhalpun wrote:
> If bytes is large enough, bytes*8 can overflow and become negative.
> 
> In that case 'bufsize -= bytes*8' causes bufsize to increase instead of
> decrease.
> 
> This leads to a segmentation fault.
> 
> Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
> ---
>  libavcodec/diracdec.c | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)

applied

thanks

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Concerning the gods, I have no means of knowing whether they exist or not
or of what sort they may be, because of the obscurity of the subject, and
the brevity of human life -- Protagoras
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20150506/82c3d165/attachment.asc>