output/httpd/IcyMetaDataServer: cast length to unsigned

Fixes another buffer overflow: if the stream has a very long title or URL, resulting in a metadata string of more than 2 kB, icy_string[0] is a negative value, which gets casted to size_t - ouch! https://bugs.musicpd.org/view.php?id=4652
2017-02-19 19:11:04 +01:00
parent a73195b7cc
commit 4bb83781e8
2 changed files with 3 additions and 1 deletions
--- a/2
+++ b/2
@@ -3,6 +3,8 @@ ver 0.20.5 (not yet released)
  - id3: fix memory leak on corrupt ID3 tags
 * decoder
  - sidplay: don't require libsidutils when building with libsidplayfp
+* output
+  - httpd: fix two buffer overflows in IcyMetaData length calculation
 * mixer
  - alsa: fix crash bug