pkgs/by-name/li/libid3tag/CVE-2017-11550-and-CVE-2017-11551.patch

   1 Common subdirectories: libid3tag-0.15.1b/msvc++ and libid3tag-0.15.1b-patched/msvc++
   2 diff -uwp libid3tag-0.15.1b/utf16.c libid3tag-0.15.1b-patched/utf16.c
   3 --- libid3tag-0.15.1b/utf16.c   2004-01-23 10:41:32.000000000 +0100
   4 +++ libid3tag-0.15.1b-patched/utf16.c   2018-11-01 13:12:00.866050641 +0100
   5 @@ -250,6 +250,8 @@ id3_ucs4_t *id3_utf16_deserialize(id3_by
   6    id3_ucs4_t *ucs4;
   7
   8    end = *ptr + (length & ~1);
   9 +  if (end == *ptr)
  10 +    return 0;
  11
  12    utf16 = malloc((length / 2 + 1) * sizeof(*utf16));
  13    if (utf16 == 0)