a988b9b025
The expression "tagLen - size > 0" may result in an integer underflow and a buffer overflow, when "size" is larger than "tagLen". "size" is read from the input file, and must not be trusted. This patch changes the expression to "tagLen > size", which is a lot safer.
Music Player Daemon (MPD) http://www.musicpd.org A daemon for playing music of various formats. Music is played through the server's audio device. The daemon stores info about all available music, and this info can be easily searched and retrieved. Player control, info retrieval, and playlist management can all be managed remotely. For basic installation information see the INSTALL file. MPD is released under the GNU General Public License version 2, which is distributed in the COPYING file. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.