Blame SOURCES/libsndfile-1.0.28-CVE_2018_13139.patch

c7f7a2
From df18323c622b54221ee7ace74b177cdcccc152d7 Mon Sep 17 00:00:00 2001
c7f7a2
From: "Brett T. Warden" <brett.t.warden@intel.com>
c7f7a2
Date: Tue, 28 Aug 2018 12:01:17 -0700
c7f7a2
Subject: [PATCH] Check MAX_CHANNELS in sndfile-deinterleave
c7f7a2
c7f7a2
Allocated buffer has space for only 16 channels. Verify that input file
c7f7a2
meets this limit.
c7f7a2
c7f7a2
Fixes #397
c7f7a2
---
c7f7a2
 programs/sndfile-deinterleave.c | 7 +++++++
c7f7a2
 1 file changed, 7 insertions(+)
c7f7a2
c7f7a2
diff --git a/programs/sndfile-deinterleave.c b/programs/sndfile-deinterleave.c
c7f7a2
index 53660310..225b4d54 100644
c7f7a2
--- a/programs/sndfile-deinterleave.c
c7f7a2
+++ b/programs/sndfile-deinterleave.c
c7f7a2
@@ -89,6 +89,13 @@ main (int argc, char **argv)
c7f7a2
 		exit (1) ;
c7f7a2
 		} ;
c7f7a2
 
c7f7a2
+	if (sfinfo.channels > MAX_CHANNELS)
c7f7a2
+	{	printf ("\nError : Input file '%s' has too many (%d) channels. Limit is %d.\n",
c7f7a2
+			argv [1], sfinfo.channels, MAX_CHANNELS) ;
c7f7a2
+		exit (1) ;
c7f7a2
+		} ;
c7f7a2
+
c7f7a2
+
c7f7a2
 	state.channels = sfinfo.channels ;
c7f7a2
 	sfinfo.channels = 1 ;
c7f7a2