Apply libmikmod-3.1.11-CVE-2009-3995,3996.diff .

This is from the Mageia Linux repository and should fix the appropriate CVEs.
sezero · Mar 14, 2012 · 6c291f4 · 6c291f4
1 parent 9899528
commit 6c291f4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/libmikmod/loaders/load_ult.c b/libmikmod/loaders/load_ult.c
@@ -224,6 +224,9 @@ BOOL ULT_Load(BOOL curious)
 	for(u=0;u<of.numchn;u++)
 		for(t=0;t<of.numpat;t++)
 			of.patterns[(t*of.numchn)+u]=tracks++;
+	/* fix for CVE-2009-3996 - snatched from SuSe's fix -- AW */
+	if (of.numchn>=UF_MAXCHAN)
+		of.numchn=UF_MAXCHAN - 1;
 
 	// SA37775
 	if (of.numchn>=UF_MAXCHAN)