avcodec/h264_slice: Fix overflow in recovery_frame computation
authorMichael Niedermayer <michael@niedermayer.cc>
Fri, 8 Jun 2018 17:07:22 +0000 (19:07 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 10 Jun 2018 22:51:20 +0000 (00:51 +0200)
commit8c20ea8ee0f3f0b27aca0204c6dfaa4ac137e34e
treebf1de5c63830d515a1cbc2f4fcbde7765e02be95
parentb796c5ae9299c795cba0d16ce1d8eef05488953b
avcodec/h264_slice: Fix overflow in recovery_frame computation

Fixes: signed integer overflow: 15 + 2147483646 cannot be represented in type 'int'
Fixes: 8381/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_H264_fuzzer-6225533137321984

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/h264_sei.c