1
0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-13 19:03:52 +02:00
openwrt-packages/libs/libvorbis/patches/100-CVE-2017-14632-CVE-2017-14633.patch
Ted Hess 287cb874c2 libvorbis: add patch for CVE-2017-14632 and CVE-2017-14633
Signed-off-by: Ted Hess <thess@kitschensync.net>
2018-02-10 09:38:59 -05:00

13 lines
291 B
Diff

--- a/lib/info.c
+++ b/lib/info.c
@@ -583,7 +583,8 @@ int vorbis_analysis_headerout(vorbis_dsp
oggpack_buffer opb;
private_state *b=v->backend_state;
- if(!b||vi->channels<=0){
+ if(!b||vi->channels<=0||vi->channels>255){
+ b = NULL;
ret=OV_EFAULT;
goto err_out;
}