On Mon, Mar 20, 2017 at 07:59:04AM +0100, Clément Bœsch wrote: > On Mon, Mar 20, 2017 at 02:21:50AM +0100, Michael Niedermayer wrote: > > Fixes: runtime error: shift exponent 255 is too large for 32-bit type > > 'unsigned int' > > Fixes: 894/clusterfuzz-testcase-4841537823309824 > > > > Found-by: continuous fuzzing process > > https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg > > Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc> > > --- > > libavcodec/wavpack.c | 6 ++++++ > > 1 file changed, 6 insertions(+) > > > > diff --git a/libavcodec/wavpack.c b/libavcodec/wavpack.c > > index 3d0b01f257..5086ae442c 100644 > > --- a/libavcodec/wavpack.c > > +++ b/libavcodec/wavpack.c > > @@ -861,6 +861,12 @@ static int wavpack_decode_block(AVCodecContext *avctx, > > int block_no, > > s->and = 1; > > s->shift = val[3]; > > } > > + if (s->shift > 31) { > > + av_log(avctx, AV_LOG_ERROR, > > + "Invalid INT32INFO, shift = %d (> 32)\n", s->shift); > > 32 or 31?
copy and paste error, ill fix it 32 is too big [...] -- Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB I have never wished to cater to the crowd; for what I know they do not approve, and what they approve I do not know. -- Epicurus
signature.asc
Description: Digital signature
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel
