diff options
| author | Monty <xiphmont@xiph.org> | 2010-06-04 05:19:12 +0000 |
|---|---|---|
| committer | Monty <xiphmont@xiph.org> | 2010-06-04 05:19:12 +0000 |
| commit | 598fb9e78793a84fa8503ea5a18dbd1f38e068ff (patch) | |
| tree | c8842ecbfe9c8afeaa58448b66af2f9744500cb9 /include | |
| parent | a3b681b5896e067a10a6321183ebc1dc75b6fb45 (diff) | |
| download | ogg-git-598fb9e78793a84fa8503ea5a18dbd1f38e068ff.tar.gz | |
Complete code review on the pattern:
if(b->endbyte*8+bits>b->storage*8)goto overflow;
Eliminate the possibility of b->endbyte overflow on buffer storage near or
exactly at long storage limit; corrections made to both read and write.
Also, harden both read and write against requesting <0 or >32 read/write. In both
case, the packer is put into 'error' state.
svn path=/trunk/ogg/; revision=17268
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions