[Ffmpeg-devel] [PATCH] Fix buffer overflows in vorbis.c

[Uoti Urpala]

If the Vorbis file has a huge number of audio channels the output packet
size might exceed AVCODEC_MAX_AUDIO_FRAME_SIZE. The code allocates
buffers that need to be big enough for blocksize_0 and blocksize_1 based
on the value of blocksize_1, but allows bitstream to specify blocksize_0
larger than blocksize_1. Patch adds checks against these conditions.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vorbis.c.diff
Type: text/x-patch
Size: 1020 bytes
Desc: 
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20060421/3032da2f/attachment.bin>