Potential security issue in src/input/shadow.c: Arithmetic Overflow in Expression

[monocle-ai]

What is a Arithmetic Overflow? When a narrow type integral value was shifted left, multiplied, added, or subtracted and the result of that arithmetic operation was cast to a wider type value. If the operation overflowed the narrow type value, then data is lost. You can prevent this loss by converting the value to a wider type before the arithmetic operation.

1 instance of this defect were found in the following locations:

Instance 1
File : src/input/shadow.c

libretro-fceumm/src/input/shadow.c

Line 69 in aba448a

ZD.zaphit = ((uint64)linets + (xs + 16) * (PAL ? 15 : 16)) / 48 + timestampbase;

Code extract:

				sum = palo[a1].r + palo[a1].g + palo[a1].b;
				if (sum >= 100 * 3) {
					ZD.zaphit = ((uint64)linets + (xs + 16) * (PAL ? 15 : 16)) / 48 + timestampbase; <------ HERE
					goto endo;
				}