avformat/rpl: check channels

Fixes: 42537199/clusterfuzz-testcase-minimized-fuzzer_loadfile_direct-5447162658357248
Fixes: runtime error: signed integer overflow: -3330498059201358222 * 4 cannot be represented in type 'int64_t' (aka 'long')

Found-by: ossfuzz
Reported-by: Kacper Michajlow
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
master
Michael Niedermayer 2 months ago
parent b16102ab1c
commit beca13a42e
No known key found for this signature in database
GPG Key ID: B18E8928B3948D64
  1. 2
      libavformat/rpl.c

@ -205,6 +205,8 @@ static int rpl_read_header(AVFormatContext *s)
if (ast->codecpar->sample_rate < 0)
return AVERROR_INVALIDDATA;
channels = read_line_and_int(pb, &error); // number of audio channels
if (channels <= 0)
return AVERROR_INVALIDDATA;
error |= read_line(pb, line, sizeof(line));
ast->codecpar->bits_per_coded_sample = read_int(line, &endptr, &error); // audio bits per sample
av_strlcpy(audio_type, endptr, RPL_LINE_LENGTH);

Loading…
Cancel
Save