Commit 04847091 for libheif
commit 0484709121fd4244836f13e35441981793e71d5c
Author: Dirk Farin <dirk.farin@gmail.com>
Date: Mon May 18 22:55:42 2026 +0200
avoid integer overflow in SampleAuxInfoReader::get_sample_info() (thanks for @TristanInSec for the report)
diff --git a/libheif/sequences/track.cc b/libheif/sequences/track.cc
index a153f3fb..59c7b6f0 100644
--- a/libheif/sequences/track.cc
+++ b/libheif/sequences/track.cc
@@ -167,7 +167,7 @@ Result<std::vector<uint8_t> > SampleAuxInfoReader::get_sample_info(const HeifFil
if (m_contiguous_and_constant_size) {
size = m_saiz->get_sample_size(0);
- offset = m_singleChunk_offset + sample_idx * size;
+ offset = m_singleChunk_offset + uint64_t{sample_idx} * size;
}
else {
size = m_saiz->get_sample_size(sample_idx);