From d50aa006fb3430bedc3872ba10e028a714499625 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 19 Oct 2012 03:36:42 +0200 Subject: tiffenc: fix integer overflow Fixes CID700699 Signed-off-by: Michael Niedermayer --- libavcodec/tiffenc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'libavcodec/tiffenc.c') diff --git a/libavcodec/tiffenc.c b/libavcodec/tiffenc.c index c675c55..dae9147 100644 --- a/libavcodec/tiffenc.c +++ b/libavcodec/tiffenc.c @@ -137,11 +137,11 @@ static void add_entry(TiffEncoderContext * s, bytestream_put_le16(&entries_ptr, type); bytestream_put_le32(&entries_ptr, count); - if (type_sizes[type] * count <= 4) { + if (type_sizes[type] * (int64_t)count <= 4) { tnput(&entries_ptr, count, ptr_val, type, 0); } else { bytestream_put_le32(&entries_ptr, *s->buf - s->buf_start); - check_size(s, count * type_sizes2[type]); + check_size(s, count * (int64_t)type_sizes2[type]); tnput(s->buf, count, ptr_val, type, 0); } -- cgit v1.1