Fixes integer overflow Fixes: 675/clusterfuzz-testcase-6722971232108544
Unified · Split
| @@ -77,10 +77,10 @@ static void picmemset(PicContext *s, AVFrame *frame, int value, int run, · 76 unmodified lines | ||
| 77 | 77 | if (*y < 0) { |
| 78 | 78 | *y = s->height - 1; |
| 79 | 79 | *plane += 1; |
| 80 | − value <<= bits_per_plane; | |
| 81 | − mask <<= bits_per_plane; | |
| 82 | 80 | if (*plane >= s->nb_planes) |
| 83 | 81 | return; |
| 82 | + value <<= bits_per_plane; | |
| 83 | + mask <<= bits_per_plane; | |
| 84 | 84 | } |
| 85 | 85 | } |
| 86 | 86 | } |