swscale: fix another integer overflow.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit 791de61bbb)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
			
			
This commit is contained in:
		
				
					committed by
					
						
						Reinhard Tartler
					
				
			
			
				
	
			
			
			
						parent
						
							f28ec73379
						
					
				
				
					commit
					4f64456a14
				
			@@ -1002,7 +1002,7 @@ int sws_init_context(SwsContext *c, SwsFilter *srcFilter, SwsFilter *dstFilter)
 | 
				
			|||||||
    c->vLumBufSize= c->vLumFilterSize;
 | 
					    c->vLumBufSize= c->vLumFilterSize;
 | 
				
			||||||
    c->vChrBufSize= c->vChrFilterSize;
 | 
					    c->vChrBufSize= c->vChrFilterSize;
 | 
				
			||||||
    for (i=0; i<dstH; i++) {
 | 
					    for (i=0; i<dstH; i++) {
 | 
				
			||||||
        int chrI= i*c->chrDstH / dstH;
 | 
					        int chrI = (int64_t) i * c->chrDstH / dstH;
 | 
				
			||||||
        int nextSlice= FFMAX(c->vLumFilterPos[i   ] + c->vLumFilterSize - 1,
 | 
					        int nextSlice= FFMAX(c->vLumFilterPos[i   ] + c->vLumFilterSize - 1,
 | 
				
			||||||
                           ((c->vChrFilterPos[chrI] + c->vChrFilterSize - 1)<<c->chrSrcVSubSample));
 | 
					                           ((c->vChrFilterPos[chrI] + c->vChrFilterSize - 1)<<c->chrSrcVSubSample));
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user