From 8a239cf4f78a34e9429f72921ca7e960b5e169c5 Mon Sep 17 00:00:00 2001 From: Nils Wallménius Date: Mon, 6 Dec 2010 16:40:05 +0000 Subject: libtremor: merge upstream revision 17511 'Add checks/rejection for absurdly huge codebooks.' git-svn-id: svn://svn.rockbox.org/rockbox/trunk@28745 a1c6a512-1295-4272-9138-f99709370657 --- apps/codecs/libtremor/codebook.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'apps/codecs') diff --git a/apps/codecs/libtremor/codebook.c b/apps/codecs/libtremor/codebook.c index 860cf07bad..c07b99bce4 100644 --- a/apps/codecs/libtremor/codebook.c +++ b/apps/codecs/libtremor/codebook.c @@ -38,6 +38,8 @@ int vorbis_staticbook_unpack(oggpack_buffer *opb,static_codebook *s){ s->entries=oggpack_read(opb,24); if(s->entries==-1)goto _eofout; + if(_ilog(s->dim)+_ilog(s->entries)>24)goto _eofout; + /* codeword ordering.... length ordered or unordered? */ switch((int)oggpack_read(opb,1)){ case 0: -- cgit v1.2.3