Attachment 146331 Details for Bug 224032 – Upstream patch for CVE-2006-4192 modplug heap overflow

[patch] Upstream patch for CVE-2006-4192 modplug heap overflow

gst-plugins-bad0.10_0.10.3-3.1.diff (text/plain), 1010 bytes, created by Lubomir Kundrak on 2007-01-23 18:47:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lubomir Kundrak

Created: 2007-01-23 18:47:26 UTC

Size: 1010 bytes

patch

obsolete

>--- gst-plugins-bad0.10-0.10.3/debian/changelog
>+++ gst-plugins-bad0.10-0.10.3/debian/changelog
>@@ -1,3 +1,12 @@
>+gst-plugins-bad0.10 (0.10.3-3.1) unstable; urgency=high
>+
>+  * Non-maintainer upload.
>+  * SECURITY: buffer overflow.
>+  * Fix potential buffer overflow in gst/modplug/libmodplug/sndfile.cpp;
>+    CVE-2006-4192; GNOME #385788; from upstream CVS / next upstream release.
>+
>+ -- Loic Minier <lool@dooz.org>  Mon, 22 Jan 2007 16:05:35 +0100
>+
> gst-plugins-bad0.10 (0.10.3-3) unstable; urgency=low
> 
>   * debian/rules:
>--- gst-plugins-bad0.10-0.10.3.orig/gst/modplug/libmodplug/sndfile.cpp
>+++ gst-plugins-bad0.10-0.10.3/gst/modplug/libmodplug/sndfile.cpp
>@@ -1081,7 +1081,7 @@
> {
> 	UINT len = 0, mem = pIns->nLength+6;
> 
>-	if ((!pIns) || (pIns->nLength < 4) || (!lpMemFile)) return 0;
>+	if ((!pIns) || ((int)pIns->nLength < 4) || (!lpMemFile)) return 0;
> 	if (pIns->nLength > MAX_SAMPLE_LENGTH) pIns->nLength = MAX_SAMPLE_LENGTH;
> 	pIns->uFlags &= ~(CHN_16BIT|CHN_STEREO);
> 	if (nFlags & RSF_16BIT)

Actions: View | Diff

Attachments on bug 224032: 146331 | 146333