Commit 16e9e126 authored by Hugo Beauzée-Luyssen's avatar Hugo Beauzée-Luyssen Committed by Jean-Baptiste Kempf

ogg: Fix a heap buffer overflow.

Reported by: An anonymous contributor working with the SecuriTeam Secure
Disclosure
program (http://www.beyondsecurity.com/ssd.html)
(cherry picked from commit 6a41b030f5b7fcbe5ad7249c374172c0fdc29add)
Signed-off-by: default avatarJean-Baptiste Kempf <jb@videolan.org>
parent 7ef075a9
...@@ -624,7 +624,7 @@ static void Ogg_DecodePacket( demux_t *p_demux, ...@@ -624,7 +624,7 @@ static void Ogg_DecodePacket( demux_t *p_demux,
if( p_stream->p_headers ) if( p_stream->p_headers )
{ {
memcpy( (unsigned char *)p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes, memcpy( (unsigned char *)p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes,
p_oggpacket->packet, p_stream->i_headers ); p_oggpacket->packet, p_oggpacket->bytes );
} }
else else
{ {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment