From: Antonio Larrosa <larrosa@kde.org>
Date: Mon, 6 Mar 2017 12:51:22 +0100
Subject: Always check the number of coefficients

When building the library with NDEBUG, asserts are eliminated
so it's better to always check that the number of coefficients
is inside the array range.

This fixes the 00191-audiofile-indexoob issue in #41
---
 libaudiofile/WAVE.cpp | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/libaudiofile/WAVE.cpp b/libaudiofile/WAVE.cpp
index 9dd8511..0fc48e8 100644
--- a/libaudiofile/WAVE.cpp
+++ b/libaudiofile/WAVE.cpp
@@ -281,6 +281,12 @@ status WAVEFile::parseFormat(const Tag &id, uint32_t size)
 
 			/* numCoefficients should be at least 7. */
 			assert(numCoefficients >= 7 && numCoefficients <= 255);
+			if (numCoefficients < 7 || numCoefficients > 255)
+			{
+				_af_error(AF_BAD_HEADER,
+						"Bad number of coefficients");
+				return AF_FAIL;
+			}
 
 			m_msadpcmNumCoefficients = numCoefficients;
 
/td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>refs</a><a class='active' href='/guix/log/gnu/packages/wdiff.scm'>log</a><a href='/guix/tree/gnu/packages/wdiff.scm?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>tree</a><a href='/guix/commit/gnu/packages/wdiff.scm?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>commit</a><a href='/guix/diff/gnu/packages/wdiff.scm?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/wdiff.scm'>
<input type='hidden' name='id' value='22530b2645d64658e4b7dea8801f5604dfd395a0'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>root</a>/<a href='/guix/log/gnu?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>gnu</a>/<a href='/guix/log/gnu/packages?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>packages</a>/<a href='/guix/log/gnu/packages/wdiff.scm?id=22530b2645d64658e4b7dea8801f5604dfd395a0'>wdiff.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/wdiff.scm?id=22530b2645d64658e4b7dea8801f5604dfd395a0&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-12-13 17:48:25 +0100'>2021-12-13</span></td><td><a href='/guix/commit/gnu/packages/wdiff.scm?id=8394619baceb118df92e355377fd543bb1aa501a'>gnu: Simplify package inputs.</a><span class='msg-avail'>...<span class='msg-tooltip'>This commit was obtained by running:

  ./pre-inst-env guix style

without any additional argument.
</span></span></td><td>Ludovic Courtès</td></tr>