diff options
| author | Even Rouault <even.rouault@spatialys.com> | 2017-07-30 15:22:24 +0200 |
|---|---|---|
| committer | Even Rouault <even.rouault@spatialys.com> | 2017-07-30 15:22:24 +0200 |
| commit | 68832af20e3b3710424947e12762b6b52d3b6ac0 (patch) | |
| tree | 67d971f3a3fea8e0db300b70903692d56f27e1e1 /src | |
| parent | 517bf6fd86dae18b62390a03533d30da0e5bb701 (diff) | |
opj_tcd_dc_level_shift_decode: avoid int32 overflow when prec == 31. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2799. Credit to OSS Fuzz
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/openjp2/tcd.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/openjp2/tcd.c b/src/lib/openjp2/tcd.c index 08c5a765..1213bffe 100644 --- a/src/lib/openjp2/tcd.c +++ b/src/lib/openjp2/tcd.c @@ -1883,7 +1883,7 @@ static OPJ_BOOL opj_tcd_dc_level_shift_decode(opj_tcd_t *p_tcd) l_max = (1 << (l_img_comp->prec - 1)) - 1; } else { l_min = 0; - l_max = (1 << l_img_comp->prec) - 1; + l_max = (OPJ_INT32)((1U << l_img_comp->prec) - 1); } l_current_ptr = l_tile_comp->data; |