CVE-2023-37327 安全更新：整数溢出导致 FLAC 图像标记处理中的堆覆盖.

2023-12-10 00:11:15 +08:00 · 2023-12-10 00:11:15 +08:00 · 64139432e0
parent 6f3499667a
commit 64139432e0
1 changed files with 2 additions and 1 deletions
--- a/gst-libs/gst/tag/tags.c
+++ b/gst-libs/gst/tag/tags.c
@ -519,7 +519,8 @@ gst_tag_image_data_to_image_sample (const guint8 * image_data,
  GstStructure *image_info = NULL;

  g_return_val_if_fail (image_data != NULL, NULL);
-  g_return_val_if_fail (image_data_len > 0, NULL);
+  g_return_val_if_fail (image_data_len > 0
+      || image_data_len == G_MAXUINT32, NULL);
  g_return_val_if_fail (gst_tag_image_type_is_valid (image_type), NULL);

  GST_DEBUG ("image data len: %u bytes", image_data_len);