samplefmt: avoid integer overflow in av_samples_get_buffer_size()

CC:libav-stable@libav.org

samplefmt: avoid integer overflow in av_samples_get_buffer_size()
CC:libav-stable@libav.org
0e830094 · Justin Ruggles · 190d4a44 · 0e830094
Commit 0e830094 authored Jan 30, 2014 by Justin Ruggles
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

samplefmt.c libavutil/samplefmt.c +2 -0

No files found.
--- a/libavutil/samplefmt.c
+++ b/libavutil/samplefmt.c
@@ -118,6 +118,8 @@ int av_samples_get_buffer_size(int *linesize, int nb_channels, int nb_samples,

    /* auto-select alignment if not specified */
    if (!align) {
+        if (nb_samples > INT_MAX - 31)
+            return AVERROR(EINVAL);
        align = 1;
        nb_samples = FFALIGN(nb_samples, 32);
    }