Commit 1d948ef7 authored by Erik de Castro Lopo's avatar Erik de Castro Lopo Committed by Robert Shih
Browse files

libFLAC/stream_decoder.c : Fail safely to avoid a heap overflow.

A file provided by the reporters caused the stream decoder to write to
un-allocated heap space resulting in a segfault. The solution is to
error out (by returning false from read_residual_partitioned_rice_())
instead of trying to continue to decode.

Fixes: CVE-2014-9028
Reported-by: Michele Spagnuolo,
             Google Security Team <mikispag@google.com>

Bug: 23238405
Change-Id: I5c000e3d85d884a92208efebe53aa6edaef8829e
parent 214b9dfa
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment