diff options
| author | Jerome Jiang <jianj@google.com> | 2018-05-24 14:07:28 -0700 |
|---|---|---|
| committer | Jerome Jiang <jianj@google.com> | 2018-06-06 10:46:42 -0700 |
| commit | 84a9e8eb9a577cb42acf095d0d22b64e416ef61d (patch) | |
| tree | 86c007b036e64b7701695725de6d6913476a7a27 /vp9/decoder | |
| parent | 8446af7e9a12c5725e845564f40272dd9185c1cc (diff) | |
| download | libvpx-84a9e8eb9a577cb42acf095d0d22b64e416ef61d.tar libvpx-84a9e8eb9a577cb42acf095d0d22b64e416ef61d.tar.gz libvpx-84a9e8eb9a577cb42acf095d0d22b64e416ef61d.tar.bz2 libvpx-84a9e8eb9a577cb42acf095d0d22b64e416ef61d.zip | |
VP9: fix unsigned integer overflow in decoder.
The difference of two size_t variables.
Change-Id: I73f35cdafc2ba64a9ddaf855cc6a410cfb63b8da
Diffstat (limited to 'vp9/decoder')
| -rw-r--r-- | vp9/decoder/vp9_decodeframe.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/vp9/decoder/vp9_decodeframe.c b/vp9/decoder/vp9_decodeframe.c index d0e896c13..4fba2e741 100644 --- a/vp9/decoder/vp9_decodeframe.c +++ b/vp9/decoder/vp9_decodeframe.c @@ -1528,7 +1528,7 @@ static int tile_worker_hook(void *arg1, void *arg2) { static int compare_tile_buffers(const void *a, const void *b) { const TileBuffer *const buf1 = (const TileBuffer *)a; const TileBuffer *const buf2 = (const TileBuffer *)b; - return (int)(buf2->size - buf1->size); + return (int)((int64_t)buf2->size - buf1->size); } static const uint8_t *decode_tiles_mt(VP9Decoder *pbi, const uint8_t *data, |