avcodec/bmp: fix integer overflow in checking header sizes

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
11 years ago · bd8b6ed96d
parent c277ab6b78
commit bd8b6ed96d
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/bmp.c
+++ b/libavcodec/bmp.c
@ -70,7 +70,7 @@ static int bmp_decode_frame(AVCodecContext *avctx,

    hsize  = bytestream_get_le32(&buf); /* header size */
    ihsize = bytestream_get_le32(&buf); /* more header size */
-    if (ihsize + 14 > hsize) {
+    if (ihsize + 14LL > hsize) {
        av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize);
        return AVERROR_INVALIDDATA;
    }