Skip to content

V
vlc
Commit 407acf38 authored by Rémi Denis-Courmont's avatar Rémi Denis-Courmont
Browse files
Options

mpeg_audio: signed integer overflow 

(with (uint8_t)255 << (int)24)
parent de7b556d
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 4 deletions
modules/codec/mpeg_audio.c
View file @ 407acf38
...@@ -264,8 +264,7 @@ static block_t *DecodeBlock( decoder_t *p_dec, block_t **pp_block ) ...@@ -264,8 +264,7 @@ static block_t *DecodeBlock( decoder_t *p_dec, block_t **pp_block )
} }
/* Build frame header */ /* Build frame header */
i_header = (p_header[0]<<24)|(p_header[1]<<16)|(p_header[2]<<8) i_header = GetDWBE(p_header);
|p_header[3];
/* Check if frame is valid and get frame info */ /* Check if frame is valid and get frame info */
p_sys->i_frame_size = SyncInfo( i_header, p_sys->i_frame_size = SyncInfo( i_header,
...@@ -324,8 +323,7 @@ static block_t *DecodeBlock( decoder_t *p_dec, block_t **pp_block ) ...@@ -324,8 +323,7 @@ static block_t *DecodeBlock( decoder_t *p_dec, block_t **pp_block )
unsigned int i_next_layer; unsigned int i_next_layer;
/* Build frame header */ /* Build frame header */
i_header = (p_header[0]<<24)|(p_header[1]<<16)|(p_header[2]<<8) i_header = GetDWBE(p_header);
|p_header[3];
i_next_frame_size = SyncInfo( i_header, i_next_frame_size = SyncInfo( i_header,
&i_next_channels, &i_next_channels,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment