https://github.com/videolan/vlc
Revision 3de60bf5b886ad81d7c05d68dff7a1ba461c0ac1 authored by Rémi Denis-Courmont on 28 June 2008, 11:00:57 UTC, committed by Rémi Denis-Courmont on 28 June 2008, 21:58:00 UTC
When i_size is sufficiently large, we would overflow malloc(), and then
overwrite the heap with stream_Read().

Bug reported by: Alin Rad Pop, Secunia Research.

(cherry-picked from commit 95e2f0ff579a5b987cbde9454aa1fc86080528e2)
1 parent 9512f7d
History
Tip revision: 3de60bf5b886ad81d7c05d68dff7a1ba461c0ac1 authored by Rémi Denis-Courmont on 28 June 2008, 11:00:57 UTC
wav: fix integer overflow (CVE-2008-2430)
Tip revision: 3de60bf
File Mode Size
autotools
bindings
doc
extras
include
libs
lxdialog
m4
modules
po
projects
share
src
test
.gitattributes -rw-r--r-- 73 bytes
.gitignore -rw-r--r-- 502 bytes
AUTHORS -rw-r--r-- 9.1 KB
COPYING -rw-r--r-- 17.7 KB
HACKING -rw-r--r-- 3.1 KB
INSTALL -rw-r--r-- 1.6 KB
INSTALL.win32 -rw-r--r-- 9.4 KB
INSTALL.wince -rw-r--r-- 3.9 KB
MAINTAINERS -rw-r--r-- 2.6 KB
Makefile.am -rw-r--r-- 47.7 KB
NEWS -rw-r--r-- 58.0 KB
README -rw-r--r-- 1.6 KB
THANKS -rw-r--r-- 18.3 KB
bootstrap -rwxr-xr-x 3.3 KB
build-vlc -rwxr-xr-x 2.8 KB
config.in -rw-r--r-- 7.8 KB
configure.ac -rw-r--r-- 190.9 KB
defconfig -rw-r--r-- 2.4 KB
make-alias -rwxr-xr-x 299 bytes
menuconfig -rwxr-xr-x 27.8 KB
toolbox -rwxr-xr-x 6.8 KB
vlc-config.in.in -rw-r--r-- 6.9 KB

README

back to top