forked from pool/xine-lib
16 lines
628 B
Diff
16 lines
628 B
Diff
Index: xine-lib-1.1.16.1/src/demuxers/demux_4xm.c
|
|
===================================================================
|
|
--- xine-lib-1.1.16.1.orig/src/demuxers/demux_4xm.c
|
|
+++ xine-lib-1.1.16.1/src/demuxers/demux_4xm.c
|
|
@@ -190,6 +190,10 @@ static int open_fourxm_file(demux_fourxm
|
|
return 0;
|
|
}
|
|
const uint32_t current_track = _X_LE_32(&header[i + 8]);
|
|
+ if(current_track >= UINT_MAX / sizeof(audio_track_t) - 1){
|
|
+ free(header);
|
|
+ return 0;
|
|
+ }
|
|
if (current_track + 1 > fourxm->track_count) {
|
|
fourxm->track_count = current_track + 1;
|
|
fourxm->tracks = realloc(fourxm->tracks,
|