External, Non-PPA KXStudio Repository
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

24 lines
815B

  1. From 2e7931c27eb15e387da440a37f12437e35b22dd4 Mon Sep 17 00:00:00 2001
  2. From: Erik de Castro Lopo <erikd@mega-nerd.com>
  3. Date: Mon, 7 Oct 2019 12:55:58 +1100
  4. Subject: [PATCH 20/63] libFLAC/bitreader.c: Fix out-of-bounds read
  5. Credit: Oss-Fuzz
  6. Issue: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17069
  7. Testcase: fuzzer_decoder-5670265022840832
  8. ---
  9. src/libFLAC/bitreader.c | 2 +-
  10. 1 file changed, 1 insertion(+), 1 deletion(-)
  11. --- a/src/libFLAC/bitreader.c
  12. +++ b/src/libFLAC/bitreader.c
  13. @@ -864,7 +864,7 @@ incomplete_lsbs:
  14. cwords = br->consumed_words;
  15. words = br->words;
  16. ucbits = FLAC__BITS_PER_WORD - br->consumed_bits;
  17. - b = br->buffer[cwords] << br->consumed_bits;
  18. + b = cwords < br->capacity ? br->buffer[cwords] << br->consumed_bits : 0;
  19. } while(cwords >= words && val < end);
  20. }