Skip to content

[oss-fuzz 42531511] Integer-overflow in MP4_rescale

Ref:

xeon ~/work/git/vlc/build-ubsan $ ./test/vlc-demux-dec-run /home/tom/Downloads/clusterfuzz-testcase-minimized-vlc-demux-libfuzzer-6299549010296832     
../../modules/demux/mp4/mp4.c:241:14: runtime error: signed integer overflow: 9223372036854 * 1937007471 cannot be represented in type 'long int'
../../modules/demux/mp4/mp4.c:236:24: runtime error: signed integer overflow: 1000000 * -9154464224367435715 cannot be represented in type 'long int'

Sample:

Edited by Thomas Guillem
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information