8db88cb2b5
When exactly four bytes remain, mvelib will attempt to compute a past-the-end pointer. Some handlers will dereference this pointer without rechecking the length. Adjust the header check to require a non-empty body. Reported-by: jwrdegoede <https://github.com/dxx-rebirth/dxx-rebirth/issues/413> |
||
|---|---|---|
| .. | ||
| decoder8.cpp | ||
| decoder16.cpp | ||
| decoders.h | ||
| mve_audio.cpp | ||
| mve_audio.h | ||
| mve_main.c | ||
| mvelib.cpp | ||
| mvelib.h | ||
| mveplay.cpp | ||
| mveplayer.1 | ||