mirror of
https://gitdl.cn/https://github.com/chakralinux/core.git
synced 2025-02-03 19:57:14 +08:00
16 lines
646 B
Diff
16 lines
646 B
Diff
Author: Moritz Muehlenhoff <jmm@inutil.org>
|
|
Description: CAN-2005-0706: Bufferoverflow in CDDB lookup parsing
|
|
|
|
diff -Naurp libcdaudio.orig/src/cddb.c libcdaudio/src/cddb.c
|
|
--- libcdaudio.orig/src/cddb.c 2009-08-02 10:30:05.000000000 +0000
|
|
+++ libcdaudio/src/cddb.c 2009-08-02 10:34:57.000000000 +0000
|
|
@@ -1052,7 +1052,7 @@ cddb_query(int cd_desc, int sock,
|
|
}
|
|
|
|
query->query_matches = 0;
|
|
- while(!cddb_read_line(sock, inbuffer, 256)) {
|
|
+ while(query->query_matches < MAX_INEXACT_MATCHES && !cddb_read_line(sock, inbuffer, 256)) {
|
|
slashed = 0;
|
|
if(strchr(inbuffer, '/') != NULL && parse_disc_artist) {
|
|
index = 0;
|