avcodec/takdec: Fix integer overflows in decode_subframe()
authorMichael Niedermayer <michael@niedermayer.cc>
Fri, 22 Sep 2017 18:45:26 +0000 (20:45 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 24 Sep 2017 19:54:13 +0000 (21:54 +0200)
commit3dabb9c69db114b1f30c30e0a2788cffc50bac40
tree371d3009bf8d5795b12f1a235a060ca44424170f
parent3d2da6d585509daddcd65f206b1a262c9c78cbce
avcodec/takdec: Fix integer overflows in decode_subframe()

Fixes: runtime error: signed integer overflow: -1562477869 + -691460395 cannot be represented in type 'int'
Fixes: 3196/clusterfuzz-testcase-minimized-4528307146063872

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/takdec.c