[gstreamer-bugs] [Bug 552801] New: audioconvert can overflow with big audio buffers

GStreamer (bugzilla.gnome.org) bugzilla-daemon at bugzilla.gnome.org
Thu Sep 18 10:06:04 PDT 2008


If you have any questions why you received this email, please see the text at
the end of this email. Replies to this email are NOT read, please see the text
at the end of this email. You can add comments to this bug at:
  http://bugzilla.gnome.org/show_bug.cgi?id=552801

  GStreamer | gst-plugins-base | Ver: HEAD CVS
           Summary: audioconvert can overflow with big audio buffers
           Product: GStreamer
           Version: HEAD CVS
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: minor
          Priority: Normal
         Component: gst-plugins-base
        AssignedTo: gstreamer-bugs at lists.sourceforge.net
        ReportedBy: hexa00 at gmail.com
         QAContact: gstreamer-bugs at lists.sourceforge.net
     GNOME version: Unspecified
   GNOME milestone: Unspecified


in audio_convert_convert

 intemp = insize * size * 8 / ctx->in.width;
  }
  if (!ctx->mix_passthrough || !ctx->out_default)
    outtemp = outsize * size * 8 / ctx->out.width;

The multiplication of insize/outsize * 32 can overflow 

Fixed by making the multiplication/ division in 64 bits before reconverting in
32... (this is ok since the division will remove the overflow)

See patch below


-- 
See http://bugzilla.gnome.org/page.cgi?id=email.html for more info about why you received
this email, why you can't respond via email, how to stop receiving
emails (or reduce the number you receive), and how to contact someone
if you are having problems with the system.

You can add comments to this bug at http://bugzilla.gnome.org/show_bug.cgi?id=552801.




More information about the Gstreamer-bugs mailing list