diff options
Diffstat (limited to 'media-sound/mpg321/files/mpg321-0.3.2-CVE-2019-14247.patch')
| -rw-r--r-- | media-sound/mpg321/files/mpg321-0.3.2-CVE-2019-14247.patch | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/media-sound/mpg321/files/mpg321-0.3.2-CVE-2019-14247.patch b/media-sound/mpg321/files/mpg321-0.3.2-CVE-2019-14247.patch new file mode 100644 index 000000000000..ff8aea8f8e7d --- /dev/null +++ b/media-sound/mpg321/files/mpg321-0.3.2-CVE-2019-14247.patch @@ -0,0 +1,20 @@ +Description: Handle illegal bitrate value +Author: Chrysostomos Nanakos <cnanakos@debian.org> +Bug-Debian: https://bugs.debian.org/870406 +Bug-Debian: https://bugs.debian.org/887057 + +--- mpg321-0.3.2.orig/mad.c ++++ mpg321-0.3.2/mad.c +@@ -574,6 +574,12 @@ void scan(void const *ptr, ssize_t len, + + if (!is_vbr) + { ++ if (header.bitrate <= 0) ++ { ++ fprintf(stderr, "Illegal bit allocation value\n"); ++ return; ++ } ++ + double time = (len * 8.0) / (header.bitrate); /* time in seconds */ + double timefrac = (double)time - ((long)(time)); + long nsamples = 32 * MAD_NSBSAMPLES(&header); /* samples per frame */ |