From f946f9acbf7aced75d3810a52c878e47680a18f6 Mon Sep 17 00:00:00 2001
From: Monty <xiphmont@xiph.org>
Date: Fri, 20 Jan 2012 07:47:12 +0000
Subject: Fix for Moz BZ #719612 for tremor-nobyte

git-svn-id: https://svn.xiph.org/branches/lowmem-no-byte/Tremor@18155 0101bb08-14d6-0310-b084-bc0e0c8e3800
---
 configure.in | 4 ++--
 floor1.c     | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/configure.in b/configure.in
index d796546..d0a5851 100644
--- a/configure.in
+++ b/configure.in
@@ -11,7 +11,7 @@ AC_CANONICAL_TARGET
 
 AM_CONFIG_HEADER([config.h])
 
-AM_INIT_AUTOMAKE(libvorbisidec,1.2.0)
+AM_INIT_AUTOMAKE(libvorbisidec,1.2.1)
 
 dnl AM_MAINTAINER_MODE only provides the option to configure to enable it
 AM_MAINTAINER_MODE
@@ -19,7 +19,7 @@ AM_MAINTAINER_MODE
 dnl Library versioning
 
 V_LIB_CURRENT=1
-V_LIB_REVISION=2
+V_LIB_REVISION=3
 V_LIB_AGE=0
 AC_SUBST(V_LIB_CURRENT)
 AC_SUBST(V_LIB_REVISION)
diff --git a/floor1.c b/floor1.c
index d721095..518f9f2 100644
--- a/floor1.c
+++ b/floor1.c
@@ -109,6 +109,7 @@ vorbis_info_floor *floor1_info_unpack (vorbis_info *vi,oggpack_buffer *opb){
   count=0;
   for(j=0,k=0;j<info->partitions;j++){
     count+=info->class[info->partitionclass[j]].class_dim; 
+    if(count>VIF_POSIT)goto err_out;
     for(;k<count;k++){
       int t=info->postlist[k+2]=oggpack_read(opb,rangebits);
       if(t>=(1<<rangebits))goto err_out;
-- 
cgit v1.2.1