avcodec/on2avc: reject subframe count whose * SUBFRAME_SIZE product overflows 32-bit
authorDavid Korczynski <david@adalogics.com>
Thu, 4 Jun 2026 22:14:06 +0000 (00:14 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 14 Jun 2026 02:59:11 +0000 (04:59 +0200)
commit8d58dc8485b485c74d6422f94fe985a17c765b63
tree0922b63d0185e7413b6f06f58824436c29ad4a22
parentecb65b1094ba9ae0c8e8575eaf4a7431f8a6f7a1
avcodec/on2avc: reject subframe count whose * SUBFRAME_SIZE product overflows 32-bit

Found-by: Anthropic agents; validated and reported by Ada Logics.
Signed-off-by: David Korczynski <david@adalogics.com>
(cherry picked from commit 331b3e9dea484f4974bbff2596e6e31c3d5e4685)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/on2avc.c