avformat/aiffdec: fix signed integer overflow

Fixes #8151

avformat/aiffdec: fix signed integer overflow
Fixes #8151
d58752bc · Paul B Mahol · 121bf1b3 · d58752bc
Commit d58752bc authored Sep 25, 2019 by Paul B Mahol
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

aiffdec.c libavformat/aiffdec.c +4 -1

No files found.
--- a/libavformat/aiffdec.c
+++ b/libavformat/aiffdec.c
@@ -243,7 +243,10 @@ static int aiff_read_header(AVFormatContext *s)
        if (size < 0)
            return size;

-        filesize -= size + 8;
+        if (size >= 0x7fffffff - 8)
+            filesize = 0;
+        else
+            filesize -= size + 8;

        switch (tag) {
        case MKTAG('C', 'O', 'M', 'M'):     /* Common chunk */