Commit a578ebb9 authored by Jan Schmidt's avatar Jan Schmidt

ext/speex/gstspeexdec.c: Fix bounds checking of mode in Speex header, which...

ext/speex/gstspeexdec.c: Fix bounds checking of mode in Speex header, which may produce negative numbers in speex < 1...

Original commit message from CVS:
* ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex < 1.1.12
parent 33927286
2008-04-11 Jan Schmidt <Jan.Schmidt@sun.com>
* ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex < 1.1.12
2008-04-09 Tim-Philipp Müller <tim at centricular dot net>
* gst/goom/Makefile.am:
......
......@@ -507,7 +507,7 @@ speex_dec_chain_parse_header (GstSpeexDec * dec, GstBuffer * buf)
if (!dec->header)
goto no_header;
if (dec->header->mode >= SPEEX_NB_MODES)
if (dec->header->mode >= SPEEX_NB_MODES || dec->header->mode < 0)
goto mode_too_old;
dec->mode = (SpeexMode *) speex_mode_list[dec->header->mode];
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment