RepoMirrors/mpv
1
0
Fork 0
mirror of https://github.com/mpv-player/mpv synced 2025-02-20 14:56:55 +00:00
Code Issues Releases Wiki Activity

potentially exploitable buffer overflow with maliciously crafted cd toc

Browse Source 
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@12290 b3059339-0415-0410-9bf9-f77b7e298cf2
This commit is contained in:
rfelker 2004-04-26 09:33:35 +00:00
parent d574a77cf3
commit b04d1313a8
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
libmpdemux/cddb.c
View File

@ -587,6 +587,7 @@ cddb_retrieve(cddb_data_t *cddb_data) {
ptr = offsets;
for( i=0; i<cddb_data->tracks ; i++ ) {
ptr += sprintf(ptr, "%d+", cdtoc[i].frame );
if (ptr-offsets > sizeof offsets - 40) break;
}
ptr[0]=0;
time_len = (cdtoc[cddb_data->tracks].frame)/75;