mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-26 19:47:17 +00:00
Gyorgy Sarvari
8ef997336a
Details: https://nvd.nist.gov/vuln/detail/CVE-2019-13147 https://nvd.nist.gov/vuln/detail/CVE-2022-24599 These patches are used by opensuse to mitigate the corresponding vulnerabulities. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
51 lines
1.5 KiB
Diff
51 lines
1.5 KiB
Diff
This patch is taken from opensuse:
|
|
https://build.opensuse.org/package/show/multimedia:libs/audiofile
|
|
|
|
CVE: CVE-2022-24599
|
|
Upstream-Status: Inactive-Upstream [lastcommit: 2016-Aug-30]
|
|
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
|
|
|
diff --unified --recursive --text --new-file --color audiofile-0.3.6.old/sfcommands/printinfo.c audiofile-0.3.6.new/sfcommands/printinfo.c
|
|
--- audiofile-0.3.6.old/sfcommands/printinfo.c 2013-03-06 13:30:03.000000000 +0800
|
|
+++ audiofile-0.3.6.new/sfcommands/printinfo.c 2025-04-30 15:18:24.778177640 +0800
|
|
@@ -37,6 +37,7 @@
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
+#include <limits.h>
|
|
|
|
static char *copyrightstring (AFfilehandle file);
|
|
|
|
@@ -147,7 +148,11 @@
|
|
int i, misccount;
|
|
|
|
misccount = afGetMiscIDs(file, NULL);
|
|
- miscids = (int *) malloc(sizeof (int) * misccount);
|
|
+ if (!misccount)
|
|
+ return NULL;
|
|
+ miscids = (int *)calloc(misccount, sizeof(int));
|
|
+ if (!miscids)
|
|
+ return NULL;
|
|
afGetMiscIDs(file, miscids);
|
|
|
|
for (i=0; i<misccount; i++)
|
|
@@ -159,13 +164,16 @@
|
|
If this code executes, the miscellaneous chunk is a
|
|
copyright chunk.
|
|
*/
|
|
- int datasize = afGetMiscSize(file, miscids[i]);
|
|
- char *data = (char *) malloc(datasize);
|
|
+ size_t datasize = afGetMiscSize(file, miscids[i]);
|
|
+ if (datasize >= INT_MAX - 1)
|
|
+ goto error;
|
|
+ char *data = (char *)calloc(datasize + 1, sizeof(char));
|
|
afReadMisc(file, miscids[i], data, datasize);
|
|
copyright = data;
|
|
break;
|
|
}
|
|
|
|
+error:
|
|
free(miscids);
|
|
|
|
return copyright;
|