libvorbis/libvorbis-r16597-CVE-2009-3379.diff

15 lines
385 B
Diff

---
lib/codebook.c | 1 +
1 file changed, 1 insertion(+)
--- a/lib/codebook.c
+++ b/lib/codebook.c
@@ -198,6 +198,7 @@
for(i=0;i<s->entries;){
long num=oggpack_read(opb,_ilog(s->entries-i));
if(num==-1)goto _eofout;
+ if(length>32)goto _errout;
for(j=0;j<num && i<s->entries;j++,i++)
s->lengthlist[i]=length;
length++;