[MPlayer-cvslog] CVS: main/libmpdemux demux_audio.c,1.46,1.47
    Reimar Doeffinger 
    Reimar.Doeffinger at stud.uni-karlsruhe.de
       
    Tue Mar 21 08:31:44 CET 2006
    
    
  
Hi,
On Mon, Mar 20, 2006 at 09:06:07PM +0100, Aurelien Jacobs CVS wrote:
> +        uint8_t *p = ptr;
> +        length = p[0] + (p[1] << 8) + (p[2] << 16) + (p[3] << 24);
> +        ptr += 4 + length;
> +
> +        p = ptr;
> +        comment_list_len = p[0] + (p[1] << 8) + (p[2] << 16) + (p[3] << 24);
Could somebody please take the time to add some proper checking here so
that at least it won't crash when length is too big?
Greetings,
Reimar Doeffinger
    
    
More information about the MPlayer-cvslog
mailing list