[oss-fuzz 4926633094217728] Integer-overflow · subtitle / ParseRealTime

Ref:

• https://oss-fuzz.com/testcase-detail/4926633094217728

xeon ~/work/git/vlc-security-tools $ VLC_TARGET=subtitle UBSAN_OPTIONS=print_stacktrace=1:halt_on_error=1:exitcode=42 /home/tom/work/git/vlc-3.0/build-ubsan-sec-fixed/test/vlc-demux-dec-run /home/tom/Downloads/clusterfuz*
../../modules/demux/subtitle.c:2084:16: runtime error: signed integer overflow: 150953528 * 60 cannot be represented in type 'int'
    #0 0x7faa3f2decf8 in ParseRealTime ../../modules/demux/subtitle.c:2084
    #1 0x7faa3f2e27cf in ParseRealText ../../modules/demux/subtitle.c:2132
    #2 0x7faa3f2e8c93 in Open ../../modules/demux/subtitle.c:681
    #3 0x7faa3ff96359 in demux_Probe ../../src/input/demux.c:191
    #4 0x7faa3ff4c537 in module_load ../../src/modules/modules.c:183
    #5 0x7faa3ff4d06b in vlc_module_load ../../src/modules/modules.c:280
    #6 0x7faa3ff96b30 in demux_NewAdvanced ../../src/input/demux.c:264
    #7 0x7faa3ff96ff5 in demux_New ../../src/input/demux.c:148
    #8 0x55f19f4be2e5 in demux_process_stream ../../test/src/input/demux-run.c:272
    #9 0x55f19f4be4bf in vlc_demux_process_url ../../test/src/input/demux-run.c:326
    #10 0x55f19f4be551 in vlc_demux_process_path ../../test/src/input/demux-run.c:340
    #11 0x55f19f4bd443 in main ../../test/vlc-demux-run.c:50
    #12 0x7faa3f433ca7 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    #13 0x7faa3f433d64 in __libc_start_main_impl ../csu/libc-start.c:360
    #14 0x55f19f4bd2d0 in _start (/home/tom/work/git/vlc-3.0/build-ubsan-sec-fixed/test/vlc-demux-dec-run+0x32d0) (BuildId: 25b4ee7be975cfeb80d40541113bd564507aee73)

Samples:

• clusterfuzz-testcase-minimized-vlc-demux-dec-libfuzzer-subtitle-4926633094217728