pmpdec: fix integer overflow
Its unlikely this affects any valid files. Reviewed-by: Paul B Mahol <onemda@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
@@ -93,7 +93,7 @@ static int pmp_header(AVFormatContext *s)
|
|||||||
avio_skip(pb, 10);
|
avio_skip(pb, 10);
|
||||||
srate = avio_rl32(pb);
|
srate = avio_rl32(pb);
|
||||||
channels = avio_rl32(pb) + 1;
|
channels = avio_rl32(pb) + 1;
|
||||||
pos = avio_tell(pb) + 4*index_cnt;
|
pos = avio_tell(pb) + 4LL*index_cnt;
|
||||||
for (i = 0; i < index_cnt; i++) {
|
for (i = 0; i < index_cnt; i++) {
|
||||||
uint32_t size = avio_rl32(pb);
|
uint32_t size = avio_rl32(pb);
|
||||||
int flags = size & 1 ? AVINDEX_KEYFRAME : 0;
|
int flags = size & 1 ? AVINDEX_KEYFRAME : 0;
|
||||||
|
Reference in New Issue
Block a user