view lib/libid3tag/patch-CVE-2008-2109.patch @ 1292:19f67093409b

system/rsync: upgrade to 3.2.3
author David Demelier <markand@malikania.fr>
date Tue, 16 Nov 2021 15:20:49 +0100
parents 9062b1b5df3f
children
line wrap: on
line source

--- field.c.orig	2008-05-05 09:49:15.000000000 -0400
+++ field.c	2008-05-05 09:49:25.000000000 -0400
@@ -291,7 +291,7 @@
 
       end = *ptr + length;
 
-      while (end - *ptr > 0) {
+      while (end - *ptr > 0 && **ptr != '\0') {
 	ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
 	if (ucs4 == 0)
 	  goto fail;