From 2c38ca3d37242c47a31dfa3edaf25592cefffa44 Mon Sep 17 00:00:00 2001
From: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Date: Sat, 1 Jun 2024 15:13:21 +0200
Subject: [PATCH] avcodec/hevc_ps: Fix UB 1 << 31
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reviewed-by: Tomas Härdin <git@haerdin.se>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
---
 libavcodec/hevc_ps.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/hevc_ps.c b/libavcodec/hevc_ps.c
index 7b486ce0af..1caaeb0b61 100644
--- a/libavcodec/hevc_ps.c
+++ b/libavcodec/hevc_ps.c
@@ -200,7 +200,7 @@ int ff_hevc_decode_short_term_rps(GetBitContext *gb, AVCodecContext *avctx,
         }
 
         for (unsigned i = 0; i < FF_ARRAY_ELEMS(used); i++)
-            rps->used |= used[i] * (1 << i);
+            rps->used |= (uint32_t)used[i] << i;
     } else {
         unsigned int nb_positive_pics;