libvorbis/libvorbis-r16597-CVE-2009-3379.diff
OBS User autobuild 1347d9ef67 Accepting request 40696 from multimedia:libs
Copy from multimedia:libs/libvorbis based on submit request 40696 from user tiwai

OBS-URL: https://build.opensuse.org/request/show/40696
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libvorbis?expand=0&rev=19
2010-05-28 16:14:01 +00:00

15 lines
385 B
Diff

---
lib/codebook.c | 1 +
1 file changed, 1 insertion(+)
--- a/lib/codebook.c
+++ b/lib/codebook.c
@@ -198,6 +198,7 @@
for(i=0;i<s->entries;){
long num=oggpack_read(opb,_ilog(s->entries-i));
if(num==-1)goto _eofout;
+ if(length>32)goto _errout;
for(j=0;j<num && i<s->entries;j++,i++)
s->lengthlist[i]=length;
length++;