mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-04-28 06:46:42 -04:00
Memory Safety: High In vban_midi_receive(), the received buffer is cast to struct vban_header and its n_frames field is accessed before validating that the packet is large enough to contain the header. A truncated packet shorter than VBAN_HEADER_SIZE would cause an out-of-bounds read. Fix by checking that len >= VBAN_HEADER_SIZE before accessing the header, matching the fix applied to vban_audio_receive(). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| audio.c | ||
| midi.c | ||
| stream.c | ||
| stream.h | ||
| vban.h | ||