[FFmpeg-cvslog] avcodec/takdec: Fix runtime error: left shift of negative value -63

Michael Niedermayer git at videolan.org
Sun Jun 18 17:25:36 EEST 2017


ffmpeg | branch: release/3.1 | Michael Niedermayer <michael at niedermayer.cc> | Sun May 21 02:46:55 2017 +0200| [56ce2cae385e2de3b6f7618c28cb28ce7a87d012] | committer: Michael Niedermayer

avcodec/takdec: Fix runtime error: left shift of negative value -63

Fixes: 1713/clusterfuzz-testcase-minimized-5791887476654080

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
(cherry picked from commit d66193252b4067144f11211f8f3e1d5a50146235)
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=56ce2cae385e2de3b6f7618c28cb28ce7a87d012
---

 libavcodec/takdec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/takdec.c b/libavcodec/takdec.c
index f556c5baa1..b438ae43b3 100644
--- a/libavcodec/takdec.c
+++ b/libavcodec/takdec.c
@@ -860,7 +860,7 @@ static int tak_decode_frame(AVCodecContext *avctx, void *data,
 
             if (s->sample_shift[chan] > 0)
                 for (i = 0; i < s->nb_samples; i++)
-                    decoded[i] <<= s->sample_shift[chan];
+                    decoded[i] *= 1 << s->sample_shift[chan];
         }
     }
 



More information about the ffmpeg-cvslog mailing list