mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2025-11-03 09:01:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

pod: avoid overflow in _frame()

Browse source
This commit is contained in:
Wim Taymans 2025-07-22 09:43:50 +02:00
parent 9189b1d8b7
commit ff7fb675f1
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
spa/include/spa/pod/builder.h
View file

@ -108,7 +108,7 @@ spa_pod_builder_deref(struct spa_pod_builder *builder, uint32_t offset)
SPA_API_POD_BUILDER struct spa_pod * SPA_API_POD_BUILDER struct spa_pod *
spa_pod_builder_frame(struct spa_pod_builder *builder, struct spa_pod_frame *frame) spa_pod_builder_frame(struct spa_pod_builder *builder, struct spa_pod_frame *frame)
{ {
if (frame->offset + SPA_POD_SIZE(&frame->pod) <= builder->size) if (frame->offset + (uint64_t)SPA_POD_SIZE(&frame->pod) <= builder->size)
return SPA_PTROFF(builder->data, frame->offset, struct spa_pod); return SPA_PTROFF(builder->data, frame->offset, struct spa_pod);
return NULL; return NULL;
} }