From 669f431cf0dcbce15ccbf406b30d1d91630ebf95 Mon Sep 17 00:00:00 2001
From: Nicolas F <ovdev@fratti.ch>
Date: Sat, 13 Jun 2026 20:10:02 +0200
Subject: [PATCH] demux_edl: fix signed integer overflow in HLS bitrate

Use the new MP_SATURATE_MUL to prevent hls_bitrate from overflowing when
being multiplied by 8.

Fixes: #18120
---
 demux/demux_edl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demux/demux_edl.c b/demux/demux_edl.c
index 8e043e6983..71351b8b15 100644
--- a/demux/demux_edl.c
+++ b/demux/demux_edl.c
@@ -243,7 +243,7 @@ static struct tl_root *parse_edl(bstr str, struct mp_log *log)
                     : get_meta(tl, index);
                 sh->lang = get_param0(&ctx, sh, "lang");
                 sh->title = get_param0(&ctx, sh, "title");
-                sh->hls_bitrate = get_param_int(&ctx, "byterate", 0) * 8;
+                MP_SATURATE_MUL(&sh->hls_bitrate, get_param_int(&ctx, "byterate", 0), 8);
                 int pid = get_param_int(&ctx, "program_id", -1);
                 if (pid >= 0)
                     MP_TARRAY_APPEND(sh, sh->program_ids, sh->num_program_ids, pid);