when speexenc encode wav file , deal with channels 0 will generate a Division by zero error which will cause the software crash sample.tar.gz
usage :
speexenc sample -
vulnerability function:
static int read_samples(FILE *fin,int frame_size, int bits, int channels, int lsb, short * input, char *buff, spx_int32_t size)
{
unsigned char in[MAX_FRAME_BYTES2];
int i;
short *s;
int nb_read;
size_t to_read;
if (size && *size<=0)
{
return 0;
}
to_read = bits/8channelsframe_size;
The text was updated successfully, but these errors were encountered:
when speexenc encode wav file , deal with channels 0 will generate a Division by zero error which will cause the software crash
sample.tar.gz
usage :
speexenc sample -
vulnerability function:
static int read_samples(FILE *fin,int frame_size, int bits, int channels, int lsb, short * input, char *buff, spx_int32_t size)
{
unsigned char in[MAX_FRAME_BYTES2];
int i;
short *s;
int nb_read;
size_t to_read;
if (size && *size<=0)
{
return 0;
}
to_read = bits/8channelsframe_size;
The text was updated successfully, but these errors were encountered: