Please sign in to comment.
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
CVE-2019-7572: Fix a buffer overread in IMA_ADPCM_nibble
If an IMA ADPCM block contained an initial index out of step table range (loaded in IMA_ADPCM_decode()), IMA_ADPCM_nibble() blindly used this bogus value and that lead to a buffer overread. This patch fixes it by moving clamping the index value at the beginning of IMA_ADPCM_nibble() function instead of the end after an update. CVE-2019-7572 https://bugzilla.libsdl.org/show_bug.cgi?id=4495 Signed-off-by: Petr P?sa? <email@example.com>
- Loading branch information
Showing with 8 additions and 6 deletions.
- +8 −6 src/audio/SDL_wave.c