[FFmpeg-cvslog] avfilter/af_silenceremove: fix possible crash if supplied duration is negative

[Paul B Mahol]

ffmpeg | branch: release/3.0 | Paul B Mahol <onemda at gmail.com> | Mon Nov 27 16:32:54 2017 +0100| [bdcbe9296a43580fb27f8a3eda65d9110a85edcf] | committer: Carl Eugen Hoyos

avfilter/af_silenceremove: fix possible crash if supplied duration is negative

Signed-off-by: Paul B Mahol <onemda at gmail.com>

Fixes ticket #7697.
(cherry picked from commit 2d1594a8d6a754a426cb53184dccf9cf8c8a94b0)

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bdcbe9296a43580fb27f8a3eda65d9110a85edcf
---

 libavfilter/af_silenceremove.c | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/libavfilter/af_silenceremove.c b/libavfilter/af_silenceremove.c
index f156d1883d..3d3651a76f 100644
--- a/libavfilter/af_silenceremove.c
+++ b/libavfilter/af_silenceremove.c
@@ -186,8 +186,17 @@ static int config_input(AVFilterLink *inlink)
 
     s->start_duration = av_rescale(s->start_duration, inlink->sample_rate,
                                    AV_TIME_BASE);
+    if (s->start_duration < 0) {
+        av_log(ctx, AV_LOG_WARNING, "start duration must be non-negative\n");
+        s->start_duration = -s->start_duration;
+    }
+
     s->stop_duration  = av_rescale(s->stop_duration, inlink->sample_rate,
                                    AV_TIME_BASE);
+    if (s->stop_duration < 0) {
+        av_log(ctx, AV_LOG_WARNING, "stop duration must be non-negative\n");
+        s->stop_duration = -s->stop_duration;
+    }
 
     s->start_holdoff = av_malloc_array(FFMAX(s->start_duration, 1),
                                        sizeof(*s->start_holdoff) *