mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-04-29 06:46:38 -04:00
026ae3af7a
Memory Safety: Medium The do_exec() function in the filter-graph builtin plugin parses a JSON array of arguments into a fixed-size argv[512] stack buffer without checking whether argc exceeds the array bounds. A crafted filter-graph configuration with more than 511 arguments would cause a stack buffer overflow. Add a bounds check before each insertion to ensure argc stays within the array limits, reserving space for the NULL terminator. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| aec | ||
| alsa | ||
| audioconvert | ||
| audiomixer | ||
| audiotestsrc | ||
| avb | ||
| bluez5 | ||
| control | ||
| ffmpeg | ||
| filter-graph | ||
| jack | ||
| libcamera | ||
| support | ||
| test | ||
| v4l2 | ||
| videoconvert | ||
| videotestsrc | ||
| volume | ||
| vulkan | ||
| meson.build | ||