Fixes integer overflow Fixes: 675/clusterfuzz-testcase-6722971232108544
Showing the changes to libavcodec (1 of 1 file). Show all
Unified · Split
| @@ -77,10 +77,10 @@ static void picmemset(PicContext *s, AVFrame *frame, int value, int run, · 76 unmodified lines | |||
| 77 | if (*y < 0) { | 77 | if (*y < 0) { |
| 78 | *y = s->height - 1; | 78 | *y = s->height - 1; |
| 79 | *plane += 1; | 79 | *plane += 1; |
| 80 | value <<= bits_per_plane; | ||
| 81 | mask <<= bits_per_plane; | ||
| 82 | if (*plane >= s->nb_planes) | 80 | if (*plane >= s->nb_planes) |
| 83 | return; | 81 | return; |
| 82 | value <<= bits_per_plane; | ||
| 83 | mask <<= bits_per_plane; | ||
| 84 | } | 84 | } |
| 85 | } | 85 | } |
| 86 | } | 86 | } |