components/multimedia/gst-plugins-good/patches/09-CVE-2016-10198.patch

   1 Backport of:
   2
   3 From 87a2c140ca54c5128093377e9b25a5c24b346727 Mon Sep 17 00:00:00 2001
   4 From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
   5 Date: Thu, 1 Dec 2016 13:38:16 +0200
   6 Subject: [PATCH] aacparse: Make sure we have enough data in the codec_data to
   7  be able to parse it
   8
   9 Also error out cleanly if mapping the buffer failed.
  10
  11 https://bugzilla.gnome.org/show_bug.cgi?id=775450
  12 ---
  13  gst/audioparsers/gstaacparse.c | 5 +++--
  14  1 file changed, 3 insertions(+), 2 deletions(-)
  15
  16 Index: gst-plugins-good0.10-0.10.31/gst/audioparsers/gstaacparse.c
  17 ===================================================================
  18 --- gst-plugins-good0.10-0.10.31.orig/gst/audioparsers/gstaacparse.c    2017-03-23 10:52:14.888585742 -0400
  19 +++ gst-plugins-good0.10-0.10.31/gst/audioparsers/gstaacparse.c 2017-03-23 10:53:20.697394854 -0400
  20 @@ -243,7 +243,7 @@
  21    if (value) {
  22      GstBuffer *buf = gst_value_get_buffer (value);
  23
  24 -    if (buf) {
  25 +    if (buf && GST_BUFFER_SIZE (buf) >= 2) {
  26        const guint8 *buffer = GST_BUFFER_DATA (buf);
  27        guint sr_idx;
  28