freebsd-ports/audio/libsndfile/files/patch-CVE-2017-8363
Jason E. Hale 466738b16b Add several security fixes addressing:
- CVE-2017-6892
- CVE-2017-8361
- CVE-2017-8362
- CVE-2017-8363
- CVE-2017-8365
- CVE-2017-12562
- CVE-2017-14634

Note:
- Fix for CVE-2017-8365 is included in files/patch-CVE-2017-8361

While here:
- Fix LICENSE and add LICENSE_FILE

PR:		226271
Submitted by:	jhale
Reviewed by:	koobs, eadler, jbeich
Approved by:	ports-secteam (eadler)
Obtained from:	upstream (https://github.com/erikd/libsndfile)
MFH:		2018Q1
Security:	004debf9-1d16-11e8-b6aa-4ccc6adda413
Security:	2b386075-1d9c-11e8-b6aa-4ccc6adda413
Differential Revision:	https://reviews.freebsd.org/D14552
2018-03-02 00:42:07 +00:00

22 lines
739 B
Text

From cd7da8dbf6ee4310d21d9e44b385d6797160d9e8 Mon Sep 17 00:00:00 2001
From: Erik de Castro Lopo <erikd@mega-nerd.com>
Date: Wed, 12 Apr 2017 20:19:34 +1000
Subject: [PATCH] src/flac.c: Fix another memory leak
When the FLAC decoder was passed a malformed file, the associated
`FLAC__StreamDecoder` object was not getting released.
Closes: https://github.com/erikd/libsndfile/issues/233
--- src/flac.c.orig 2018-03-01 09:40:45 UTC
+++ src/flac.c
@@ -841,7 +841,9 @@ flac_read_header (SF_PRIVATE *psf)
psf_log_printf (psf, "End\n") ;
- if (psf->error == 0)
+ if (psf->error != 0)
+ FLAC__stream_decoder_delete (pflac->fsd) ;
+ else
{ FLAC__uint64 position ;
FLAC__stream_decoder_get_decode_position (pflac->fsd, &position) ;