]> www.infradead.org Git - linux.git/commit
media: coda: cast an operand of multiplication to a larger type
authorAnastasia Belova <abelova@astralinux.ru>
Mon, 5 Feb 2024 15:23:50 +0000 (18:23 +0300)
committerHans Verkuil <hverkuil-cisco@xs4all.nl>
Sun, 25 Aug 2024 06:15:24 +0000 (08:15 +0200)
commitc2c982def1a3a1963ebddd41cc70ee026cb8b765
tree0cc0097106c180d0b62dad8ea7bd1424284ea0fb
parenta9fef294e8b1e53a7ea733576dd4788c84ec8a21
media: coda: cast an operand of multiplication to a larger type

If the width and height are 0xffff (or close), the result of a
multiplication will overflow.
Cast to a larger type to avoid undefined behavior.

Such values are possible in CODA7, but unlikely.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 918c66fd4126 ("[media] coda: add CODA7541 decoding support")
Signed-off-by: Anastasia Belova <abelova@astralinux.ru>
Signed-off-by: Sebastian Fricke <sebastian.fricke@collabora.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
drivers/media/platform/chips-media/coda/coda-bit.c