pool/libmikmod
SHA256
4
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update fix

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/libmikmod?expand=0&rev=8
This commit is contained in:
Pavol Rusnak 2010-04-22 13:02:46 +00:00 committed by Git OBS Bridge
parent 00080e7a1c
commit bbb018bd4b
1 changed files with 18 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
libmikmod-3.1.12-CVE-2009-3995,3996.diff
View File

@ -2,18 +2,24 @@ Index: loaders/load_it.c
=================================================================== ===================================================================
--- loaders/load_it.c.orig --- loaders/load_it.c.orig
+++ loaders/load_it.c +++ loaders/load_it.c
@@ -862,6 +862,11 @@ BOOL IT_Load(BOOL curious) @@ -747,6 +747,8 @@ BOOL IT_Load(BOOL curious)
#endif ih. name##end =_mm_read_UBYTE(modreader); \
ih. name##susbeg=_mm_read_UBYTE(modreader); \
IT_ProcessEnvelope(vol); ih. name##susend=_mm_read_UBYTE(modreader); \
+ + if (ih. name##pts>= ENVPOINTS) \
+ // Secunia SA37775 + ih. name##pts = ENVPOINTS-1; \
+ if (ih.volpts>= ENVPOINTS) for(lp=0;lp<ITENVCNT;lp++) { \
+ ih.volpts = ENVPOINTS-1; ih. name##node[lp]=_mm_read_##type (modreader); \
+ ih. name##tick[lp]=_mm_read_I_UWORD(modreader); \
for(u=0;u<ih.volpts;u++) @@ -760,6 +762,8 @@ BOOL IT_Load(BOOL curious)
d->volenv[u].val=(ih.volnode[u]<<2); ih. name/**/end =_mm_read_UBYTE(modreader); \
ih. name/**/susbeg=_mm_read_UBYTE(modreader); \
ih. name/**/susend=_mm_read_UBYTE(modreader); \
+ if (ih. name/**/pts>= ENVPOINTS) \
+ ih. name/**/pts = ENVPOINTS-1; \
for(lp=0;lp<ITENVCNT;lp++) { \
ih. name/**/node[lp]=_mm_read_/**/type (modreader); \
ih. name/**/tick[lp]=_mm_read_I_UWORD(modreader); \
Index: loaders/load_ult.c Index: loaders/load_ult.c
=================================================================== ===================================================================
--- loaders/load_ult.c.orig --- loaders/load_ult.c.orig