shithub: aacdec

Download patch

ref: 45c7e44c812f42f3a8d7d6c765b96a3cf974524a
parent: a7b9a593d6149b7f5cbe3e37fe96aa5d488475f2
author: Fabian Greffrath <fabian@greffrath.com>
date: Mon Aug 17 03:37:09 EDT 2020

mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()

Terminate the string read into the stack buffer,
fixes #56.

--- a/frontend/mp4read.c

+++ b/frontend/mp4read.c

@@ -100,6 +100,7 @@

         if (!txt[size])

             break;

     }

+    txt[sizemax-1] = '\0';

     return size;

 }