diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2013-02-24 22:53:58 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2013-02-25 18:36:21 +0100 |
| commit | a960f3b91876d50d9a1bff63d11b2a5a6a16fd89 (patch) | |
| tree | 59e6e20178e0be1543da8a37afa8a3bab6db3184 /libavformat/pmpdec.c | |
| parent | b8f6912816d2cb0eda314bab08fa012293893c2f (diff) | |
| download | ffmpeg-a960f3b91876d50d9a1bff63d11b2a5a6a16fd89.tar.gz | |
pmpdec: fix integer overflow
Its unlikely this affects any valid files.
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavformat/pmpdec.c')
| -rw-r--r-- | libavformat/pmpdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/pmpdec.c b/libavformat/pmpdec.c index 06b2271f81..3b8c5f7013 100644 --- a/libavformat/pmpdec.c +++ b/libavformat/pmpdec.c @@ -93,7 +93,7 @@ static int pmp_header(AVFormatContext *s) avio_skip(pb, 10); srate = avio_rl32(pb); channels = avio_rl32(pb) + 1; - pos = avio_tell(pb) + 4*index_cnt; + pos = avio_tell(pb) + 4LL*index_cnt; for (i = 0; i < index_cnt; i++) { uint32_t size = avio_rl32(pb); int flags = size & 1 ? AVINDEX_KEYFRAME : 0; |