freebsd-ports/audio/flac/files/patch-src_libFLAC_bitreader.c
Christian Weisgerber 3984e6561a audio/flac: Fix out-of-bounds read
Obtained from:	2e7931c27e
Security:	49346de2-b015-11eb-9bdf-f8b156b6dcc8
Security:	CVE-2020-0499
2021-05-08 19:00:04 +02:00

13 lines
484 B
C

https://github.com/xiph/flac/commit/2e7931c27eb15e387da440a37f12437e35b22dd4
--- src/libFLAC/bitreader.c.orig 2021-05-08 16:06:17 UTC
+++ src/libFLAC/bitreader.c
@@ -864,7 +864,7 @@ incomplete_lsbs:
cwords = br->consumed_words;
words = br->words;
ucbits = FLAC__BITS_PER_WORD - br->consumed_bits;
- b = br->buffer[cwords] << br->consumed_bits;
+ b = cwords < br->capacity ? br->buffer[cwords] << br->consumed_bits : 0;
} while(cwords >= words && val < end);
}