Alexander Dahl
  1. Alexander Dahl

buildroot

Public

Commits

Peter Korsgaard
16daa3c10db
Peter Korsgaard committed c9890cfa67a
audiofile: add security patch for CVE-2017-6831

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in
Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a
denial of service (crash) via a crafted file.

https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp
https://github.com/mpruett/audiofile/issues/35

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit bd5f84d301c4e74ca200a9336eca88468ec0e1f3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>