avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case
authorMichael Niedermayer <michael@niedermayer.cc>
Wed, 14 Jun 2017 21:49:23 +0000 (23:49 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Thu, 15 Jun 2017 23:05:30 +0000 (01:05 +0200)
commit46acaabd2a1318cd57260a64a21aa80a9cbda05b
tree83a18d08418e5cab257cc4263053dca198aba7d8
parentc1e2c1e84e3a08ecb0a1389e829160a1f461f786
avcodec/mpeg4videodec: Fix integer overflow in num_sprite_warping_points=2 case

Fixes: runtime error: signed integer overflow: 131072 + 2147352576 cannot be represented in type 'int'
Fixes: 2192/clusterfuzz-testcase-minimized-5370387988742144

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 0a87be404ab7e3f47e67e79160dcc9623e36835b)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/mpeg4videodec.c