/[packages]/updates/5/gstreamer1.0-plugins-ugly/current/SOURCES/0002-asfdemux-Reset-number-of-languages-to-0-when-freeing.patch
ViewVC logotype

Contents of /updates/5/gstreamer1.0-plugins-ugly/current/SOURCES/0002-asfdemux-Reset-number-of-languages-to-0-when-freeing.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1185991 - (show annotations) (download)
Wed Dec 27 22:26:10 2017 UTC (6 years, 3 months ago) by luigiwalser
File size: 1064 byte(s)
add patches from debian to fix CVE-2017-584[67]
1 From dec880031d16f1ee4919a36f49298419246cf6a8 Mon Sep 17 00:00:00 2001
2 From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
3 Date: Mon, 30 Jan 2017 15:39:59 +0200
4 Subject: [PATCH] asfdemux: Reset number of languages to 0 when freeing the
5 array because of errors
6
7 Otherwise we will happily index into the array at NULL if the requested
8 index is smaller than the number of languages that were previously
9 allocated.
10
11 https://bugzilla.gnome.org/show_bug.cgi?id=777937
12 ---
13 gst/asfdemux/gstasfdemux.c | 1 +
14 1 file changed, 1 insertion(+)
15
16 Index: gst-plugins-ugly1.0-1.4.4/gst/asfdemux/gstasfdemux.c
17 ===================================================================
18 --- gst-plugins-ugly1.0-1.4.4.orig/gst/asfdemux/gstasfdemux.c
19 +++ gst-plugins-ugly1.0-1.4.4/gst/asfdemux/gstasfdemux.c
20 @@ -3523,6 +3523,7 @@ not_enough_data:
21 GST_WARNING_OBJECT (demux, "short read parsing language list object!");
22 g_free (demux->languages);
23 demux->languages = NULL;
24 + demux->num_languages = 0;
25 return GST_FLOW_OK; /* not fatal */
26 }
27 }

  ViewVC Help
Powered by ViewVC 1.1.30