summaryrefslogtreecommitdiffstats
path: root/package/audiofile/0007-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
Commit message (Collapse)AuthorAgeFilesLines
* audiofile: add security patch for CVE-2017-6839Peter Korsgaard2017-03-311-0/+122
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/ https://github.com/mpruett/audiofile/issues/41 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud