From: "Tomas Härdin" <git@haerdin.se>
To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Subject: Re: [FFmpeg-devel] [PATCH] avcodec/jpeg2000dsp: Use unsigned to avoid overflow
Date: Tue, 27 Sep 2022 13:38:44 +0200
Message-ID: <70077180d3f119cfa4877506a1bff87e821f8edb.camel@haerdin.se> (raw)
In-Reply-To: <GV1P250MB073764491C83F132EE28A8C98F559@GV1P250MB0737.EURP250.PROD.OUTLOOK.COM>
tis 2022-09-27 klockan 13:20 +0200 skrev Andreas Rheinhardt:
> Tomas Härdin:
> > tis 2022-09-27 klockan 03:47 +0200 skrev Andreas Rheinhardt:
> > > Affected the jpeg2000dsp checkasm test.
> > >
> > > Signed-off-by: Andreas Rheinhardt
> > > <andreas.rheinhardt@outlook.com>
> > > ---
> > > libavcodec/jpeg2000dsp.c | 9 ++++-----
> > > 1 file changed, 4 insertions(+), 5 deletions(-)
> > >
> > > diff --git a/libavcodec/jpeg2000dsp.c b/libavcodec/jpeg2000dsp.c
> > > index b61be3b72f..b1bff6d5b1 100644
> > > --- a/libavcodec/jpeg2000dsp.c
> > > +++ b/libavcodec/jpeg2000dsp.c
> > > @@ -76,14 +76,13 @@ static void ict_int(void *_src0, void *_src1,
> > > void *_src2, int csize)
> > >
> > > static void rct_int(void *_src0, void *_src1, void *_src2, int
> > > csize)
> > > {
> > > - int32_t *src0 = _src0, *src1 = _src1, *src2 = _src2;
> > > - int32_t i0, i1, i2;
> > > + uint32_t *src0 = _src0, *src1 = _src1, *src2 = _src2;
> > > int i;
> > >
> > > for (i = 0; i < csize; i++) {
> > > - i1 = *src0 - (*src2 + *src1 >> 2);
> > > - i0 = i1 + *src2;
> > > - i2 = i1 + *src1;
> > > + uint32_t i1 = *src0 - ((int32_t)(*src2 + *src1) >> 2);
> >
> > The addition could conceivably overflow. Also could just use / 4
> > instead of >> 2.
>
> The addition uses unsigned types, so that overflow is defined.
Wups, I was looking at the original code. You're right of course. What
about subtracting src0 (unsigned) from that result (signed)? Do they
get promoted to int64_t?
> Furthermore, the shift is performed on signed types and the rounding
> for
> negative numbers divided by four is different than what >> 2 produces
> (integer division is defined to use rounding towards zero, whereas
> right
> shifts of negative numbers are implementation defined and typically
> use
> rounding towards -inf (we require this behaviour)).
Tricky
/Tomas
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".
next prev parent reply other threads:[~2022-09-27 11:38 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-09-27 1:47 Andreas Rheinhardt
2022-09-27 8:07 ` Tomas Härdin
2022-09-27 11:20 ` Andreas Rheinhardt
2022-09-27 11:38 ` Tomas Härdin [this message]
2022-09-27 11:41 ` Andreas Rheinhardt
2022-10-02 17:18 ` Andreas Rheinhardt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=70077180d3f119cfa4877506a1bff87e821f8edb.camel@haerdin.se \
--to=git@haerdin.se \
--cc=ffmpeg-devel@ffmpeg.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
This inbox may be cloned and mirrored by anyone:
git clone --mirror https://master.gitmailbox.com/ffmpegdev/0 ffmpegdev/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 ffmpegdev ffmpegdev/ https://master.gitmailbox.com/ffmpegdev \
ffmpegdev@gitmailbox.com
public-inbox-index ffmpegdev
Example config snippet for mirrors.
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git