commit 7f3b4de05380a49ac90d336d91e3509fe139a244
author Jean-Michel Trivi <jmtrivi@google.com> Wed Dec 26 22:51:50 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Dec 26 22:51:50 2018 +0000
tree 31152d34357f36308de7088dad1ed525e3879f76
parent e8b5674a5f99b4d9c893ad5fcee24279cd3a81ac
parent 71602ad45c131d431b40f659aa3f5ea2ea5883eb

Merge "Unsigned Integer Overflow in transportDec_AdjustEndOfAccessUnit()."

libMpegTPDec/src/tpdec_lib.cpp

diff --git a/libMpegTPDec/src/tpdec_lib.cpp b/libMpegTPDec/src/tpdec_lib.cpp
index 1d8b7b3..cee0768 100644
--- a/libMpegTPDec/src/tpdec_lib.cpp
+++ b/libMpegTPDec/src/tpdec_lib.cpp
@@ -736,9 +736,9 @@
             hTp->parser.latm.m_audioMuxLengthBytes > 0) {
           int loasOffset;
 
-          loasOffset = (hTp->parser.latm.m_audioMuxLengthBytes * 8 +
-                        FDKgetValidBits(hBs)) -
-                       hTp->globalFramePos;
+          loasOffset = ((INT)hTp->parser.latm.m_audioMuxLengthBytes * 8 +
+                        (INT)FDKgetValidBits(hBs)) -
+                       (INT)hTp->globalFramePos;
           if (loasOffset != 0) {
             FDKpushBiDirectional(hBs, loasOffset);
             /* For ELD and other payloads there is an unknown amount of padding,