mirror of
https://github.com/taglib/taglib.git
synced 2026-07-11 05:41:22 -04:00
f09a84c4ae
The MAX_MP4_ATOM_COUNT_PER_LEVEL of 5000 seems to be too restrictive, a legitimate file with 5390 atoms was reported to have been rejected. The crafted file from #1344 had 653789 atoms at the top level, which freezed the read process for 15s on my system. Enlarging the limit to 50000 should be sufficient and will stop the crafted file after 2s.
TagLib
TagLib Audio Metadata Library
TagLib is a library for reading and editing the metadata of several popular audio formats. Currently, it supports various metadata containers such as ID3v1, ID3v2 and Vorbis comments for MP3, MP4, AAC, Ogg, Opus, FLAC, Speex, APE, MPC, WavPack, WAV, AIFF, TrueAudio, Matroska, WebM, ASF, WMA, DSF, DFF and tracker (MOD, XM, S3M, IT) files.
TagLib is distributed under the GNU Lesser General Public License (LGPL) and Mozilla Public License (MPL). Essentially that means that it may be used in proprietary applications, but if changes are made to TagLib they must be contributed back to the project. Please review the licenses if you are considering using TagLib in your project.