Skip to content
Verified Commit 7129a6cf authored by Timothy B. Terriberry's avatar Timothy B. Terriberry Committed by Tristan Matthews
Browse files

Fix signed overflow in _book_maptype1_quantvals().



If b->dims is very large, vals will be 1 and acc1 will overflow a
long.
This causes us to read too many values for this codebook.

Signed-off-by: default avatarTristan Matthews <tmatth@videolan.org>

(cherry-picked from vorbis commit e5b1378996dba3ea82fb35403cb1f0bbff19495c)

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19619

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/tremor
parent 7c30a663
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment