components/multimedia/gst-plugins-base/patches/01-CVE-2016-9811.patch

   1 From 2fdccfd64fc609e44e9c4b8eed5bfdc0ab9c9095 Mon Sep 17 00:00:00 2001
   2 From: Matthew Waters <matthew@centricular.com>
   3 Date: Wed, 23 Nov 2016 21:27:55 +1100
   4 Subject: [PATCH] typefind: bounds check windows ico detection
   5
   6 Fixes out of bounds read
   7
   8 https://bugzilla.gnome.org/show_bug.cgi?id=774902
   9 ---
  10  gst/typefind/gsttypefindfunctions.c | 2 ++
  11  1 file changed, 2 insertions(+)
  12
  13 Index: gst-plugins-base0.10-0.10.36/gst/typefind/gsttypefindfunctions.c
  14 ===================================================================
  15 --- gst-plugins-base0.10-0.10.36.orig/gst/typefind/gsttypefindfunctions.c       2017-03-23 13:06:21.783543138 -0400
  16 +++ gst-plugins-base0.10-0.10.36/gst/typefind/gsttypefindfunctions.c    2017-03-23 13:06:21.755542805 -0400
  17 @@ -4149,6 +4149,8 @@
  18    gint32 size, offset;
  19
  20    datalen = gst_type_find_get_length (find);
  21 +  if (datalen < 18)
  22 +    return;
  23    if ((data = gst_type_find_peek (find, 0, 6)) == NULL)
  24      return;
  25