summaryrefslogtreecommitdiff
path: root/legacy/sox/CVE-2017-15642.patch
diff options
context:
space:
mode:
authorZach van Rijn <me@zv.io>2023-02-06 03:51:29 +0000
committerZach van Rijn <me@zv.io>2023-02-06 03:53:58 +0000
commit491802e5efd6fa2d5543de51e93ffc2ae0a6f1b1 (patch)
tree1b72677c935f5c82312062ad291474fba200c2be /legacy/sox/CVE-2017-15642.patch
parent130b4b415b5591a7320ea3cfdf87c43987916655 (diff)
downloadpackages-491802e5efd6fa2d5543de51e93ffc2ae0a6f1b1.tar.gz
packages-491802e5efd6fa2d5543de51e93ffc2ae0a6f1b1.tar.bz2
packages-491802e5efd6fa2d5543de51e93ffc2ae0a6f1b1.tar.xz
packages-491802e5efd6fa2d5543de51e93ffc2ae0a6f1b1.zip
user/sox: move to legacy/
This package has numerous CVEs and does not currently build on our pmmx target. It is not required by any other packages at the moment. See also: #961.
Diffstat (limited to 'legacy/sox/CVE-2017-15642.patch')
-rw-r--r--legacy/sox/CVE-2017-15642.patch34
1 files changed, 34 insertions, 0 deletions
diff --git a/legacy/sox/CVE-2017-15642.patch b/legacy/sox/CVE-2017-15642.patch
new file mode 100644
index 000000000..95beb4f6f
--- /dev/null
+++ b/legacy/sox/CVE-2017-15642.patch
@@ -0,0 +1,34 @@
+From f56c0dbca8f5bd02ea88970c248c0d087386e807 Mon Sep 17 00:00:00 2001
+From: Mans Rullgard <mans@mansr.com>
+Date: Mon, 20 Nov 2017 11:03:15 +0000
+Subject: [PATCH] aiff: fix crash on empty comment chunk (CVE-2017-15642)
+
+This fixes a use after free and double free if an empty comment
+chunk follows a non-empty one.
+---
+ src/aiff.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/aiff.c b/src/aiff.c
+index 240d2e1f..11ddb542 100644
+--- a/src/aiff.c
++++ b/src/aiff.c
+@@ -62,7 +62,6 @@ int lsx_aiffstartread(sox_format_t * ft)
+ size_t ssndsize = 0;
+ char *annotation;
+ char *author;
+- char *comment = NULL;
+ char *copyright;
+ char *nametext;
+
+@@ -270,6 +269,7 @@ int lsx_aiffstartread(sox_format_t * ft)
+ free(annotation);
+ }
+ else if (strncmp(buf, "COMT", (size_t)4) == 0) {
++ char *comment = NULL;
+ rc = commentChunk(&comment, "Comment:", ft);
+ if (rc) {
+ /* Fail already called in function */
+--
+2.25.0
+