Fixes: left shift of
1073741824 by 1 places cannot be represented in type 'int'
Fixes: signed integer overflow:
2049431315 +
262759074 cannot be represented in type 'int'
Fixes: 16012/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_APE_fuzzer-
5719016003338240
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
int32_t *out, APERice *rice, int blockstodecode)
{
int i;
int32_t *out, APERice *rice, int blockstodecode)
{
int i;
+ unsigned ksummax, ksummin;
rice->ksum = 0;
for (i = 0; i < FFMIN(blockstodecode, 5); i++) {
rice->ksum = 0;
for (i = 0; i < FFMIN(blockstodecode, 5); i++) {
else
p->coeffsA[filter][0]--;
else
p->coeffsA[filter][0]--;
- p->filterA[filter] += p->lastA[filter];
+ p->filterA[filter] += (unsigned)p->lastA[filter];
return p->filterA[filter];
}
return p->filterA[filter];
}