avcodec/wavpack: Fix runtime error: shift exponent 32 is too large for 32-bit type 'int'

michaelni · michaelni · commit 7cebc5a9ccba · 2017-03-14T02:23:50.000+01:00
Fixes: 822/clusterfuzz-testcase-4873433189974016 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
diff --git a/libavcodec/wavpack.c b/libavcodec/wavpack.c
@@ -846,7 +846,7 @@ static int wavpack_decode_block(AVCodecContext *avctx, int block_no,
                 continue;
             }
             bytestream2_get_buffer(&gb, val, 4);
-            if (val[0] > 32) {
+            if (val[0] > 31) {
                 av_log(avctx, AV_LOG_ERROR,
                        "Invalid INT32INFO, extra_bits = %d (> 32)\n", val[0]);
                 continue;

Original file line number	Diff line number	Diff line change
`@@ -846,7 +846,7 @@ static int wavpack_decode_block(AVCodecContext *avctx, int block_no,`
`846`	`846`	`continue;`
`847`	`847`	`}`
`848`	`848`	`bytestream2_get_buffer(&gb, val, 4);`
`849`		`- if (val[0] > 32) {`
	`849`	`+ if (val[0] > 31) {`
`850`	`850`	`av_log(avctx, AV_LOG_ERROR,`
`851`	`851`	`"Invalid INT32INFO, extra_bits = %d (> 32)\n", val[0]);`
`852`	`852`	`continue;`