diff options
author | Jan Schmidt <thaytan@mad.scientist.com> | 2008-04-11 10:32:20 +0000 |
---|---|---|
committer | Jan Schmidt <thaytan@mad.scientist.com> | 2008-04-11 10:32:20 +0000 |
commit | a578ebb9646a39ed269699d91494653c44c9fcbd (patch) | |
tree | 4a7a00701c91d0332f1a4daf08e996b6ba71a67a /ext/speex/gstspeexdec.c | |
parent | 3392728608f30c999007639854309d762f25090f (diff) |
ext/speex/gstspeexdec.c: Fix bounds checking of mode in Speex header, which may produce negative numbers in speex < 1...
Original commit message from CVS:
* ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex < 1.1.12
Diffstat (limited to 'ext/speex/gstspeexdec.c')
-rw-r--r-- | ext/speex/gstspeexdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/speex/gstspeexdec.c b/ext/speex/gstspeexdec.c index fbd71258..48d16052 100644 --- a/ext/speex/gstspeexdec.c +++ b/ext/speex/gstspeexdec.c @@ -507,7 +507,7 @@ speex_dec_chain_parse_header (GstSpeexDec * dec, GstBuffer * buf) if (!dec->header) goto no_header; - if (dec->header->mode >= SPEEX_NB_MODES) + if (dec->header->mode >= SPEEX_NB_MODES || dec->header->mode < 0) goto mode_too_old; dec->mode = (SpeexMode *) speex_mode_list[dec->header->mode]; |