SHA256
1
0
forked from pool/aubio
aubio/aubio-resampler-NULL-deref-fix.patch
Takashi Iwai a3d4a60444 Accepting request 627873 from home:tiwai:branches:multimedia:libs
- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch

OBS-URL: https://build.opensuse.org/request/show/627873
OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/aubio?expand=0&rev=25
2018-08-07 13:34:56 +00:00

27 lines
752 B
Diff

From a81b12a3b4174953b3bc7ef4c37103f4d5636740 Mon Sep 17 00:00:00 2001
From: Paul Brossier <piem@piem.org>
Date: Mon, 6 Aug 2018 14:58:27 +0200
Subject: [PATCH] src/io/source_avcodec.c: give up if resampling context failed
opening (see #137, closes #187)
---
src/io/source_avcodec.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/io/source_avcodec.c b/src/io/source_avcodec.c
index 8197445c0165..6d8efa79f685 100644
--- a/src/io/source_avcodec.c
+++ b/src/io/source_avcodec.c
@@ -275,6 +275,8 @@ aubio_source_avcodec_t * new_aubio_source_avcodec(const char_t * path, uint_t sa
// default to mono output
aubio_source_avcodec_reset_resampler(s, 0);
+ if (s->avr == NULL) goto beach;
+
s->eof = 0;
s->multi = 0;
--
2.18.0