Files
ffmpeg/libavformat
Ganesh Ajjanagadde d59bfcd112 avformat/mov: fix integer overflow
Partially fixes Ticket 4727.

-duration is not a safe expression, since duration can be INT_MIN.
One might ask how it can become INT_MIN.
Although it is true that line 2574 is no longer reached with INT_MIN due
to commit 053e80f6ea (which fixed another
integer overflow issue), mov_update_dts_shift is called on line 3549 as
well, right after a read of untrusted data.
One can do the fix locally there, but that function is already a huge
mess. Changing mov_update_dts_shift is likely better.

This changes duration to INT_MIN + 1 in such cases. This should not make any
practical difference since such streams are anyway fuzzer files.

Tested with FATE.

Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Ganesh Ajjanagadde <gajjanagadde@gmail.com>
2015-10-13 19:41:07 -04:00
..
2015-10-04 01:37:31 +02:00
2015-09-23 19:10:13 +02:00
2015-10-04 01:37:31 +02:00
2015-10-09 22:09:08 +02:00
2015-10-04 13:23:42 +02:00
2015-06-14 15:09:33 +02:00
2015-08-20 12:22:50 +02:00
2015-05-26 19:54:41 +02:00
2015-05-31 19:04:52 +02:00
2015-10-04 01:37:31 +02:00
2015-10-13 19:41:07 -04:00
2015-09-05 18:32:58 +02:00
2015-10-05 22:31:38 +02:00
2015-06-07 21:55:46 +02:00
2015-10-11 18:39:23 +02:00
2015-09-01 13:35:37 +02:00
2015-05-27 21:48:47 +02:00
2015-10-04 01:37:31 +02:00