From 7c5925a448551129ec2e11157c847703def79608 Mon Sep 17 00:00:00 2001
From: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date: Fri, 13 Mar 2015 21:10:12 -0500
Subject: efi: widen operand to avoid overflow

CID #1287141.
---
 src/boot/efi/splash.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/boot/efi')

diff --git a/src/boot/efi/splash.c b/src/boot/efi/splash.c
index 81d6439f43..470ea3e2cc 100644
--- a/src/boot/efi/splash.c
+++ b/src/boot/efi/splash.c
@@ -97,7 +97,7 @@ EFI_STATUS bmp_parse_header(UINT8 *bmp, UINTN size, struct bmp_dib **ret_dib,
                 return EFI_UNSUPPORTED;
         }
 
-        row_size = (((dib->depth * dib->x) + 31) / 32) * 4;
+        row_size = ((UINTN) dib->depth * dib->x + 31) / 32 * 4;
         if (file->size - file->offset <  dib->y * row_size)
                 return EFI_INVALID_PARAMETER;
         if (row_size * dib->y > 64 * 1024 * 1024)
-- 
cgit v1.2.3-54-g00ecf