913028a780
The function decodeFirstFrame() allocates memory based on data from the mp3 header. This can make the buffer size allocation overflow, or lead to a DoS attack with a very large buffer. Cap this buffer at 8 million frames, which should really be enough for reasonable files. |
||
|---|---|---|
| .. | ||
| _flac_common.c | ||
| _flac_common.h | ||
| _ogg_common.c | ||
| _ogg_common.h | ||
| aac_plugin.c | ||
| audiofile_plugin.c | ||
| flac_plugin.c | ||
| mod_plugin.c | ||
| mp3_plugin.c | ||
| mp4_plugin.c | ||
| mpc_plugin.c | ||
| oggflac_plugin.c | ||
| oggvorbis_plugin.c | ||
| wavpack_plugin.c | ||