mirror of
https://github.com/taglib/taglib.git
synced 2026-08-14 06:17:00 -04:00
Acts1631andGitHub
cb92e0aec4
SV8 packet parsing subtracted its header size from an unchecked unsigned packet length. An undersized value could wrap and make the parser allocate the remainder of a large file. Reject packet lengths smaller than their header or beyond the remaining file data before reading the payload.