Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 86872 Details for
Bug 133520
{media-video/ffmpeg|media-libs/xine-lib} multiple issues (CVE-200{5-4048|6-2802})
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
ffmpeg3.diff
ffmpeg3.diff (text/plain), 1.38 KB, created by
Sune Kloppenborg Jeppesen (RETIRED)
on 2006-05-16 12:11:21 UTC
(
hide
)
Description:
ffmpeg3.diff
Filename:
MIME Type:
Creator:
Sune Kloppenborg Jeppesen (RETIRED)
Created:
2006-05-16 12:11:21 UTC
Size:
1.38 KB
patch
obsolete
>Update of /cvsroot/ffmpeg/ffmpeg/libavcodec >In directory mail:/var2/tmp/cvs-serv5017 > >Modified Files: > vorbis.c >Log Message: >Vorbis specs requires blocksize_1 >= blocksize_0, error if it's false. >Predict buffer size from blocksize_1 and number of channels and make >sure this does not exceed AVCODEC_MAX_AUDIO_FRAME_SIZE > >Patch by Uoti Urpala >>> uoti |.| urpala |@| pp1 |.| inet |.| fi <<< > > >Index: vorbis.c >=================================================================== >RCS file: /cvsroot/ffmpeg/ffmpeg/libavcodec/vorbis.c,v >retrieving revision 1.19 >retrieving revision 1.20 >diff -u -d -r1.19 -r1.20 >--- vorbis.c 25 Feb 2006 22:41:06 -0000 1.19 >+++ vorbis.c 23 Apr 2006 21:11:31 -0000 1.20 >@@ -872,10 +872,17 @@ > bl1=get_bits(gb, 4); > vc->blocksize_0=(1<<bl0); > vc->blocksize_1=(1<<bl1); >- if (bl0>13 || bl0<6 || bl1>13 || bl1<6) { >+ if (bl0>13 || bl0<6 || bl1>13 || bl1<6 || bl1<bl0) { > av_log(vc->avccontext, AV_LOG_ERROR, " Vorbis id header packet corrupt (illegal blocksize). \n"); > return 3; > } >+ // output format int16 >+ if (vc->blocksize_1/2 * vc->audio_channels * 2 > >+ AVCODEC_MAX_AUDIO_FRAME_SIZE) { >+ av_log(vc->avccontext, AV_LOG_ERROR, "Vorbis channel count makes " >+ "output packets too large.\n"); >+ return 4; >+ } > vc->swin=vwin[bl0-6]; > vc->lwin=vwin[bl1-6]; >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 133520
:
86870
|
86871
| 86872 |
86873