Upstream fix for CVE-2015-6749. https://trac.xiph.org/ticket/2212 From 04815d3e1bfae3a6cdfb2c25358a5a72b61299f7 Mon Sep 17 00:00:00 2001 From: Mark Harris Date: Sun, 30 Aug 2015 05:54:46 -0700 Subject: [PATCH] oggenc: Fix large alloca on bad AIFF input Fixes #2212 --- oggenc/audio.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/oggenc/audio.c b/oggenc/audio.c index 477da8c..4921fb9 100644 --- a/oggenc/audio.c +++ b/oggenc/audio.c @@ -245,8 +245,8 @@ static int aiff_permute_matrix[6][6] = int aiff_open(FILE *in, oe_enc_opt *opt, unsigned char *buf, int buflen) { int aifc; /* AIFC or AIFF? */ - unsigned int len; - unsigned char *buffer; + unsigned int len, readlen; + unsigned char buffer[22]; unsigned char buf2[8]; aiff_fmt format; aifffile *aiff = malloc(sizeof(aifffile)); @@ -269,9 +269,9 @@ int aiff_open(FILE *in, oe_enc_opt *opt, unsigned char *buf, int buflen) return 0; /* Weird common chunk */ } - buffer = alloca(len); - - if(fread(buffer,1,len,in) < len) + readlen = len < sizeof(buffer) ? len : sizeof(buffer); + if(fread(buffer,1,readlen,in) < readlen || + (len > readlen && !seek_forward(in, len-readlen))) { fprintf(stderr, _("Warning: Unexpected EOF in reading AIFF header\n")); return 0; -- 2.5.0 ckages/enlightenment.scm?id=d2e0a4c54a3fadaa45b0558c3e2fdf9a26c63bf9'>commitdiff
path: root/gnu/packages/enlightenment.scm
AgeCommit message (Expand)Author
2023-02-16gnu: Remove unneeded module imports....* gnu/packages/abiword.scm, * gnu/packages/ada.scm, * gnu/packages/agda.scm, * gnu/packages/backup.scm, * gnu/packages/barrier.scm, * gnu/packages/bioinformatics.scm, * gnu/packages/bootstrap.scm, * gnu/packages/bqn.scm, * gnu/packages/c.scm, * gnu/packages/chemistry.scm, * gnu/packages/coq.scm, * gnu/packages/cross-base.scm, * gnu/packages/databases.scm, * gnu/packages/emacs-xyz.scm, * gnu/packages/enlightenment.scm, * gnu/packages/games.scm, * gnu/packages/geo.scm, * gnu/packages/ghostscript.scm, * gnu/packages/gl.scm, * gnu/packages/golang.scm, * gnu/packages/jami.scm, * gnu/packages/java-maths.scm, * gnu/packages/kde-frameworks.scm, * gnu/packages/kde-plasma.scm, * gnu/packages/language.scm, * gnu/packages/libreoffice.scm, * gnu/packages/linphone.scm, * gnu/packages/lisp.scm, * gnu/packages/llvm.scm, * gnu/packages/machine-learning.scm, * gnu/packages/minetest.scm, * gnu/packages/monitoring.scm, * gnu/packages/nfs.scm, * gnu/packages/ocr.scm, * gnu/packages/opencl.scm, * gnu/packages/pdf.scm, * gnu/packages/python-xyz.scm, * gnu/packages/racket.scm, * gnu/packages/rust.scm, * gnu/packages/syncthing.scm, * gnu/packages/syndication.scm, * gnu/packages/telegram.scm, * gnu/packages/vulkan.scm, * gnu/packages/web-browsers.scm, * gnu/packages/web.scm, * gnu/packages/webkit.scm: Remove some unecessary module imports. Efraim Flashner
2023-02-09gnu: efl: Choose lua implementation based on system architecture....* gnu/packages/enlightenment.scm (efl)[propagated-inputs]: Use luajit or lua based on the system's luajit support. [arguments]: Adjust configure-flags to use the correct lua. Efraim Flashner
2023-02-07gnu: efl: Remove input labels....* gnu/packages/enlightenment.scm (efl) [native-inputs]: Remove labels. [inputs]: Likewise. [propagated-inputs]: Likewise. [arguments]: Use search-input-file. Only substitute libcurl.so.4, as libcurl.so.5 does not exist in our curl package. Maxim Cournoyer
2023-02-07gnu: efl: Replace ibus with ibus-minimal....This is to avoid having EFL depend on GTK 4, reducing its closure size from 2134.8 MiB to 1446.7 MiB. * gnu/packages/enlightenment.scm (efl) [inputs]: Replace ibus with ibus-minimal. Maxim Cournoyer
2022-12-06gnu: terminology: Update to 1.13.0....* gnu/packages/enlightenment.scm (terminology): Update to 1.13.0. Efraim Flashner
2022-09-19gnu: enlightenment: Update to 0.25.4....* gnu/packages/enlightenment.scm (enlightenment): Update to 0.25.4. Efraim Flashner
2022-09-19gnu: efl: Update to 1.26.3....* gnu/packages/enlightenment.scm (efl): Update to 1.26.3. Efraim Flashner
2022-09-13gnu: python-efl: Update to 1.26.0....* gnu/packages/enlightenment.scm (python-efl): Update to 1.26.0. [inputs]: Add python-packaging. [arguments]: Remove trailing #t from phases. Efraim Flashner