changeset 940:9062b1b5df3f

lib/libid3tag: add missing patch
author David Demelier <markand@malikania.fr>
date Thu, 29 Aug 2019 12:11:52 +0200
parents c0a8b556ab82
children 9a011946a1b0
files lib/libid3tag/patch-CVE-2008-2109.patch
diffstat 1 files changed, 11 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/lib/libid3tag/patch-CVE-2008-2109.patch	Thu Aug 29 12:11:52 2019 +0200
@@ -0,0 +1,11 @@
+--- field.c.orig	2008-05-05 09:49:15.000000000 -0400
++++ field.c	2008-05-05 09:49:25.000000000 -0400
+@@ -291,7 +291,7 @@
+ 
+       end = *ptr + length;
+ 
+-      while (end - *ptr > 0) {
++      while (end - *ptr > 0 && **ptr != '\0') {
+ 	ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0);
+ 	if (ucs4 == 0)
+ 	  goto fail;