mirror/taglib
1
0
Fork 0
mirror of https://github.com/taglib/taglib.git synced 2025-06-04 01:28:21 -04:00
Code Issues Packages Projects Releases Wiki Activity

FLAC: Validate the size of a read

Browse Source 
Without this we can crash trying to dereference parts of `header`.
This commit is contained in:
bobsayshilol 2021-04-24 15:56:52 +01:00 committed by Urs Fleisch
parent 1644c0dd87
commit 3391bd80c4
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
taglib/flac/flacfile.cpp
View File

@ -497,6 +497,11 @@ void FLAC::File::scan()
seek(nextBlockOffset);
const ByteVector header = readBlock(4);
if(header.size() != 4) {
debug("FLAC::File::scan() -- Failed to read a block header");
setValid(false);
return;
}
// Header format (from spec):
// <1> Last-metadata-block flag