Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-06-03 17:42:32 +02:00
Code Issues Projects Releases Wiki Activity

2018-07-23 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Fixed a buffer overflow vulnerability in the 'RDWaveFile' class.
This commit is contained in:
Fred Gleason 2018-07-23 17:39:03 +00:00
parent 59c19a9e17
commit c722e4fe09
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -17212,3 +17212,5 @@
* Cleaned up CDDA calls to ensure UTF-8 compatibility.
2018-07-23 Fred Gleason <fredg@paravelsystems.com>
* Cleaned up RDConf calls to ensure UTF-8 compatibility.
2018-07-23 Fred Gleason <fredg@paravelsystems.com>
* Fixed a buffer overflow vulnerability in the 'RDWaveFile' class.

6
lib/rdwavefile.cpp
View File

@ -4220,10 +4220,8 @@ bool RDWaveFile::MakeCart(unsigned ptr_offset)
cart_end_time.hour(),
cart_end_time.minute(),
cart_end_time.second());
sprintf((char *)cart_chunk_data+488,"%s",
(const char *)PACKAGE);
sprintf((char *)cart_chunk_data+552,"%s",
(const char *)VERSION);
snprintf((char *)cart_chunk_data+488,64,"%s",PACKAGE);
snprintf((char *)cart_chunk_data+552,64,"%s",VERSION);
if(!cart_user_def.isEmpty()) {
sprintf((char *)cart_chunk_data+616,"%s",
(const char *)cart_user_def.left(64));