PR #23165 opened by michaelni
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23165
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23165.patch

Fixes: integer overflow

Found by: Jiale Yao
Signed-off-by: Michael Niedermayer <[email protected]>


>From efa42f0bfedb7a0bc786f817550721e4d35c5f4d Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <[email protected]>
Date: Wed, 20 May 2026 04:00:33 +0200
Subject: [PATCH] avcodec/jpeg2000dec: compute mask in decode_clnpass() like in
 decode_sigpass()

Fixes: integer overflow

Found by: Jiale Yao
Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/jpeg2000dec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/jpeg2000dec.c b/libavcodec/jpeg2000dec.c
index c5682829b6..01c025235e 100644
--- a/libavcodec/jpeg2000dec.c
+++ b/libavcodec/jpeg2000dec.c
@@ -1960,7 +1960,7 @@ static void decode_clnpass(const Jpeg2000DecoderContext 
*s, Jpeg2000T1Context *t
                            int width, int height, int bpno, int bandno,
                            int seg_symbols, int vert_causal_ctx_csty_symbol)
 {
-    int mask = 3 << (bpno - 1), y0, x, y, runlen, dec;
+    int mask = (3u << bpno)>>1, y0, x, y, runlen, dec;
 
     for (y0 = 0; y0 < height; y0 += 4) {
         for (x = 0; x < width; x++) {
-- 
2.52.0

_______________________________________________
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to