Please sign in to comment.
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
CVE-2019-7577: Fix a buffer overread in MS_ADPCM_decode
If RIFF/WAV data chunk length is shorter then expected for an audio format defined in preceeding RIFF/WAV format headers, a buffer overread can happen. This patch fixes it by checking a MS ADPCM data to be decoded are not past the initialized buffer. CVE-2019-7577 Reproducer: https://bugzilla.libsdl.org/show_bug.cgi?id=4492 Signed-off-by: Petr P?sa? <email@example.com>
- Loading branch information
Showing with 9 additions and 1 deletion.
- +9 −1 src/audio/SDL_wave.c