mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-03-03 02:58:02 +00:00
All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)
Originally committed as revision 14070 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
parent
d5ae45841f
commit
0328995893
@ -205,7 +205,7 @@ static void id3v2_read_ttag(AVFormatContext *s, int taglen, char *dst, int dstle
|
|||||||
break;
|
break;
|
||||||
|
|
||||||
case 3: /* UTF-8 */
|
case 3: /* UTF-8 */
|
||||||
len = FFMIN(taglen, dstlen);
|
len = FFMIN(taglen, dstlen-1);
|
||||||
get_buffer(s->pb, dst, len);
|
get_buffer(s->pb, dst, len);
|
||||||
dst[len] = 0;
|
dst[len] = 0;
|
||||||
break;
|
break;
|
||||||
|
Loading…
Reference in New Issue
Block a user