Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-07-28 14:39:32 +02:00
Code Issues Projects Releases Wiki Activity

2018-07-23 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Fixed a buffer overflow vulnerability in the 'RDWaveFile' class.
This commit is contained in:
Fred Gleason 2018-07-23 17:39:03 +00:00
parent 59c19a9e17
commit c722e4fe09
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -17212,3 +17212,5 @@
* Cleaned up CDDA calls to ensure UTF-8 compatibility. * Cleaned up CDDA calls to ensure UTF-8 compatibility.
2018-07-23 Fred Gleason <fredg@paravelsystems.com> 2018-07-23 Fred Gleason <fredg@paravelsystems.com>
* Cleaned up RDConf calls to ensure UTF-8 compatibility. * Cleaned up RDConf calls to ensure UTF-8 compatibility.
2018-07-23 Fred Gleason <fredg@paravelsystems.com>
* Fixed a buffer overflow vulnerability in the 'RDWaveFile' class.

6
lib/rdwavefile.cpp
View File

@ -4220,10 +4220,8 @@ bool RDWaveFile::MakeCart(unsigned ptr_offset)
cart_end_time.hour(), cart_end_time.hour(),
cart_end_time.minute(), cart_end_time.minute(),
cart_end_time.second()); cart_end_time.second());
sprintf((char *)cart_chunk_data+488,"%s", snprintf((char *)cart_chunk_data+488,64,"%s",PACKAGE);
(const char *)PACKAGE); snprintf((char *)cart_chunk_data+552,64,"%s",VERSION);
sprintf((char *)cart_chunk_data+552,"%s",
(const char *)VERSION);
if(!cart_user_def.isEmpty()) { if(!cart_user_def.isEmpty()) {
sprintf((char *)cart_chunk_data+616,"%s", sprintf((char *)cart_chunk_data+616,"%s",
(const char *)cart_user_def.left(64)); (const char *)cart_user_def.left(64));