shithub: aacdec

Download patch

ref: 1073aeef823cafd844704389e9a497c257768e2f
parent: eb19fa58e08ffad79fe4af09abc0b5a584b4e6e6
author: Fabian Greffrath <fabian@greffrath.com>
date: Mon Aug 17 03:37:09 EDT 2020

mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()

Terminate the string read into the stack buffer,
fixes #56.

--- a/frontend/mp4read.c

+++ b/frontend/mp4read.c

@@ -95,6 +95,7 @@

         if (!txt[size])

             break;

     }

+    txt[sizemax-1] = '\0';

     return size;

 }