Commit 6a41b030 authored by Hugo Beauzée-Luyssen's avatar Hugo Beauzée-Luyssen

ogg: Fix a heap buffer overflow.

Reported by: An anonymous contributor working with the SecuriTeam Secure
Disclosure
program (http://www.beyondsecurity.com/ssd.html)
parent 0cdf8d86
...@@ -640,7 +640,7 @@ static void Ogg_DecodePacket( demux_t *p_demux, ...@@ -640,7 +640,7 @@ static void Ogg_DecodePacket( demux_t *p_demux,
if( p_stream->p_headers ) if( p_stream->p_headers )
{ {
memcpy( (unsigned char *)p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes, memcpy( (unsigned char *)p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes,
p_oggpacket->packet, p_stream->i_headers ); p_oggpacket->packet, p_oggpacket->bytes );
} }
else else
{ {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment