commit 0695cff3ddcccae44d347a3ed25ef52f86b884a0
author Treehugger Robot <treehugger-gerrit@google.com> Tue Nov 27 20:26:33 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Nov 27 20:26:33 2018 +0000
tree 4a5fcfa6f4d2801d65e7a8b84fc333d9b388c4a4
parent 0a1e3b6ef9e9188bcd026d921b023b0c311d30b0
parent b325367b332525e82ab331e3750a955a0679529a

Merge "Unsigned Integer Overflow in SpatialDecParseSpecificConfigHeader()."

libSACdec/src/sac_bitdec.cpp

diff --git a/libSACdec/src/sac_bitdec.cpp b/libSACdec/src/sac_bitdec.cpp
index 37e0cf2..45fb17a 100644
--- a/libSACdec/src/sac_bitdec.cpp
+++ b/libSACdec/src/sac_bitdec.cpp
@@ -291,13 +291,13 @@
   if (sacHeaderLen == 127) {
     sacHeaderLen += FDKreadBits(bitstream, 16);
   }
-  numFillBits = FDKgetValidBits(bitstream);
+  numFillBits = (INT)FDKgetValidBits(bitstream);
 
   err = SpatialDecParseSpecificConfig(bitstream, pSpatialSpecificConfig,
                                       sacHeaderLen, coreCodec);
 
   numFillBits -=
-      FDKgetValidBits(bitstream); /* the number of read bits (tmpBits) */
+      (INT)FDKgetValidBits(bitstream); /* the number of read bits (tmpBits) */
   numFillBits = (8 * sacHeaderLen) - numFillBits;
   if (numFillBits < 0) {
     /* Parsing went wrong */