1 Star 0 Fork 8

liuyumeng/gstreamer-plugins-base

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
该仓库未声明开源许可证文件(LICENSE),使用请关注具体项目描述及其代码上游依赖。
克隆/下载
CVE-2021-3522.patch 917 Bytes
一键复制 编辑 原始数据 按行查看 历史
jackie_wu 提交于 2021-06-10 10:55 . fix CVE-2021-3522
From 3533c5126904500678b559822545d585a376a492 Mon Sep 17 00:00:00 2001
From: jackie_wu <[email protected]>
Date: Thu, 10 Jun 2021 09:36:14 +0800
Subject: Check the right variable when checking if there is
enough data left to read the frame size
---
gst-libs/gst/tag/id3v2frames.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gst-libs/gst/tag/id3v2frames.c b/gst-libs/gst/tag/id3v2frames.c
index 78aa80e..924a864 100644
--- a/gst-libs/gst/tag/id3v2frames.c
+++ b/gst-libs/gst/tag/id3v2frames.c
@@ -108,7 +108,7 @@ id3v2_parse_frame (ID3TagsWorking * work)
if (work->frame_flags & (ID3V2_FRAME_FORMAT_COMPRESSION |
ID3V2_FRAME_FORMAT_DATA_LENGTH_INDICATOR)) {
- if (work->hdr.frame_data_size <= 4)
+ if (frame_data_size <= 4)
return FALSE;
if (ID3V2_VER_MAJOR (work->hdr.version) == 3) {
work->parse_size = GST_READ_UINT32_BE (frame_data);
--
2.23.0
Loading...
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
1
https://gitee.com/liuyumeng1/gstreamer-plugins-base.git
[email protected]:liuyumeng1/gstreamer-plugins-base.git
liuyumeng1
gstreamer-plugins-base
gstreamer-plugins-base
master

搜索帮助