pkgsrc/audio/libcdaudio/patches/patch-ac
drochner a54d1f643d fixa possible heap overflow due to wrong buffer length check
(CVE-2008-5030), from Debian, bump PKGREVISION
2008-11-21 10:38:19 +00:00

22 lines
727 B
Text

$NetBSD: patch-ac,v 1.2 2008/11/21 10:38:19 drochner Exp $
--- src/cddb.c.orig 2004-09-09 03:26:39.000000000 +0200
+++ src/cddb.c
@@ -1052,7 +1052,7 @@ cddb_query(int cd_desc, int sock,
}
query->query_matches = 0;
- while(!cddb_read_line(sock, inbuffer, 256)) {
+ while(query->query_matches < MAX_INEXACT_MATCHES && !cddb_read_line(sock, inbuffer, 256)) {
slashed = 0;
if(strchr(inbuffer, '/') != NULL && parse_disc_artist) {
index = 0;
@@ -1679,7 +1679,7 @@ cddb_read_disc_data(int cd_desc, struct
free(file);
while(!feof(cddb_data)) {
- fgets(inbuffer, 512, cddb_data);
+ fgets(inbuffer, 256, cddb_data);
cddb_process_line(inbuffer, data);
}