diff options
| author | Monty <xiphmont@xiph.org> | 2010-06-04 05:19:12 +0000 |
|---|---|---|
| committer | Monty <xiphmont@xiph.org> | 2010-06-04 05:19:12 +0000 |
| commit | 3bbd3ac3c4effc7a6070e757b7ab10f02a1b90f5 (patch) | |
| tree | c8842ecbfe9c8afeaa58448b66af2f9744500cb9 /README | |
| parent | 77722395fa51673ab1c67ffa0550f82c6d61cb9e (diff) | |
| download | ogg-3bbd3ac3c4effc7a6070e757b7ab10f02a1b90f5.tar.gz | |
Complete code review on the pattern:
if(b->endbyte*8+bits>b->storage*8)goto overflow;
Eliminate the possibility of b->endbyte overflow on buffer storage near or
exactly at long storage limit; corrections made to both read and write.
Also, harden both read and write against requesting <0 or >32 read/write. In both
case, the packer is put into 'error' state.
git-svn-id: http://svn.xiph.org/trunk/ogg@17268 0101bb08-14d6-0310-b084-bc0e0c8e3800
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions