From a578ebb9646a39ed269699d91494653c44c9fcbd Mon Sep 17 00:00:00 2001 From: Jan Schmidt Date: Fri, 11 Apr 2008 10:32:20 +0000 Subject: ext/speex/gstspeexdec.c: Fix bounds checking of mode in Speex header, which may produce negative numbers in speex < 1... Original commit message from CVS: * ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header): Fix bounds checking of mode in Speex header, which may produce negative numbers in speex < 1.1.12 --- ext/speex/gstspeexdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ext/speex') diff --git a/ext/speex/gstspeexdec.c b/ext/speex/gstspeexdec.c index fbd71258..48d16052 100644 --- a/ext/speex/gstspeexdec.c +++ b/ext/speex/gstspeexdec.c @@ -507,7 +507,7 @@ speex_dec_chain_parse_header (GstSpeexDec * dec, GstBuffer * buf) if (!dec->header) goto no_header; - if (dec->header->mode >= SPEEX_NB_MODES) + if (dec->header->mode >= SPEEX_NB_MODES || dec->header->mode < 0) goto mode_too_old; dec->mode = (SpeexMode *) speex_mode_list[dec->header->mode]; -- cgit