mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2026-05-18 21:37:41 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

sendspin: avoid buffer overread

Browse source 
Check that we have enough bytes (>=9) to parse the message type and the
timestamp.
This commit is contained in:
Wim Taymans 2026-05-08 10:33:39 +02:00
parent 22243d5ce9
commit 6cee86e509
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/modules/module-sendspin-recv.c
View file

@ -876,9 +876,14 @@ static int do_handle_binary(struct client *client, const uint8_t *payload, int s
{ {
struct impl *impl = client->impl; struct impl *impl = client->impl;
int32_t filled; int32_t filled;
uint32_t index, length = size - 9; uint32_t index, length;
uint64_t timestamp; uint64_t timestamp;
if (size < 9)
return 0;
length = size - 9;
if (payload[0] != 4 || client->stream == NULL) if (payload[0] != 4 || client->stream == NULL)
return 0; return 0;