pkgsrc/multimedia/mplayer-share/patches/patch-al
tonnerre 634506bef2 Add a patch for CVE-2008-1558 to mplayer. This fixes a buffer overflow in
the RealRTSP SDP code which can be exploited to execute arbitrary code
remotely.
2008-05-11 03:46:24 +00:00

14 lines
577 B
Text

$NetBSD: patch-al,v 1.3 2008/05/11 03:46:24 tonnerre Exp $
--- stream/realrtsp/sdpplin.c.orig 2007-10-07 21:49:25.000000000 +0200
+++ stream/realrtsp/sdpplin.c
@@ -330,7 +330,8 @@ sdpplin_t *sdpplin_parse(char *data) {
if(filter(data,"a=StreamCount:integer;",&buf)) {
desc->stream_count=(unsigned int)atoi(buf);
- desc->stream=malloc(sizeof(sdpplin_stream_t*)*desc->stream_count);
+ desc->stream=calloc(desc->stream_count, sizeof(sdpplin_stream_t*));
+ if (!desc->stream) desc->stream_count = 0;
handled=1;
data=nl(data);
}