- CVE-2017-6892 - CVE-2017-8361 - CVE-2017-8362 - CVE-2017-8363 - CVE-2017-8365 - CVE-2017-12562 - CVE-2017-14634 Note: - Fix for CVE-2017-8365 is included in files/patch-CVE-2017-8361 While here: - Fix LICENSE and add LICENSE_FILE PR: 226271 Submitted by: jhale Reviewed by: koobs, eadler, jbeich Approved by: ports-secteam (eadler) Obtained from: upstream (https://github.com/erikd/libsndfile) MFH: 2018Q1 Security: 004debf9-1d16-11e8-b6aa-4ccc6adda413 Security: 2b386075-1d9c-11e8-b6aa-4ccc6adda413 Differential Revision: https://reviews.freebsd.org/D14552
22 lines
739 B
Text
22 lines
739 B
Text
From cd7da8dbf6ee4310d21d9e44b385d6797160d9e8 Mon Sep 17 00:00:00 2001
|
|
From: Erik de Castro Lopo <erikd@mega-nerd.com>
|
|
Date: Wed, 12 Apr 2017 20:19:34 +1000
|
|
Subject: [PATCH] src/flac.c: Fix another memory leak
|
|
|
|
When the FLAC decoder was passed a malformed file, the associated
|
|
`FLAC__StreamDecoder` object was not getting released.
|
|
|
|
Closes: https://github.com/erikd/libsndfile/issues/233
|
|
--- src/flac.c.orig 2018-03-01 09:40:45 UTC
|
|
+++ src/flac.c
|
|
@@ -841,7 +841,9 @@ flac_read_header (SF_PRIVATE *psf)
|
|
|
|
psf_log_printf (psf, "End\n") ;
|
|
|
|
- if (psf->error == 0)
|
|
+ if (psf->error != 0)
|
|
+ FLAC__stream_decoder_delete (pflac->fsd) ;
|
|
+ else
|
|
{ FLAC__uint64 position ;
|
|
|
|
FLAC__stream_decoder_get_decode_position (pflac->fsd, &position) ;
|