Re: [FFmpeg-devel] [PATCH] avformat/aaxdec: Fix potential integer overflow

2020-09-20 Thread Paul B Mahol
On Sun, Sep 20, 2020 at 06:16:57PM +0200, Andreas Rheinhardt wrote: > The AAX demuxer reads a 32bit number containing the amount of entries > of an array and stores it in an uint32_t. Yet when iterating over this > array, a loop counter of type int is used. This leads to undefined > behaviour if th

[FFmpeg-devel] [PATCH] avformat/aaxdec: Fix potential integer overflow

2020-09-20 Thread Andreas Rheinhardt
The AAX demuxer reads a 32bit number containing the amount of entries of an array and stores it in an uint32_t. Yet when iterating over this array, a loop counter of type int is used. This leads to undefined behaviour if the amount of entries is not in the range of int; to avoid this, it is general