cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix buffer overflow, can allow arbitrary code execution by playing an mp3

Browse Source 
with specially crafted header; "Davide Del Vecchio" <dante@alighieri.org>
This commit is contained in:
pvalchev 2004-09-07 21:23:24 +00:00
parent 5b5b01e1ba
commit e0cda5f23d
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
audio/mpg123/patches/patch-layer2_c Normal file
View File

@ -0,0 +1,15 @@
$OpenBSD: patch-layer2_c,v 1.1 2004/09/07 21:23:24 pvalchev Exp $
--- layer2.c.orig Tue Sep 7 15:13:46 2004
+++ layer2.c Tue Sep 7 15:14:44 2004
@@ -265,6 +265,11 @@ int do_layer2(struct frame *fr,int outmo
fr->jsbound = (fr->mode == MPG_MD_JOINT_STEREO) ?
(fr->mode_ext<<2)+4 : fr->II_sblimit;
+ if (fr->jsbound > fr->II_sblimit) {
+ fprintf(stderr, "Truncating stereo boundary to sideband limit.\n");
+ fr->jsbound=fr->II_sblimit;
+ }
+
if(stereo == 1 || single == 3)
single = 0;