mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2025-11-11 13:30:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

iter: check if size can hold a spa_pod

Browse source
This commit is contained in:
Wim Taymans 2019-10-16 10:44:12 +02:00
parent e28b5b8232
commit 6ad52b1a11
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
spa/include/spa/pod/iter.h
View file

@ -129,7 +129,7 @@ static inline struct spa_pod_control *spa_pod_control_next(const struct spa_pod_
static inline void *spa_pod_from_data(void *data, size_t maxsize, off_t offset, size_t size) static inline void *spa_pod_from_data(void *data, size_t maxsize, off_t offset, size_t size)
{ {
void *pod; void *pod;
if (offset + size > maxsize) if (size < sizeof(struct spa_pod) || offset + size > maxsize)
return NULL; return NULL;
pod = SPA_MEMBER(data, offset, void); pod = SPA_MEMBER(data, offset, void);
if (SPA_POD_SIZE(pod) > size) if (SPA_POD_SIZE(pod) > size)