Browse Source

tiffenc: fix integer overflow

Fixes CID700699
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n1.1
Michael Niedermayer 13 years ago
parent
commit
d50aa006fb
1 changed files with 2 additions and 2 deletions
  1. +2
    -2
      libavcodec/tiffenc.c

+ 2
- 2
libavcodec/tiffenc.c View File

@@ -137,11 +137,11 @@ static void add_entry(TiffEncoderContext * s,
bytestream_put_le16(&entries_ptr, type);
bytestream_put_le32(&entries_ptr, count);

if (type_sizes[type] * count <= 4) {
if (type_sizes[type] * (int64_t)count <= 4) {
tnput(&entries_ptr, count, ptr_val, type, 0);
} else {
bytestream_put_le32(&entries_ptr, *s->buf - s->buf_start);
check_size(s, count * type_sizes2[type]);
check_size(s, count * (int64_t)type_sizes2[type]);
tnput(s->buf, count, ptr_val, type, 0);
}



Loading…
Cancel
Save