mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-05-02 06:46:36 -04:00
d4cf1d0d6f
Memory Safety: Low The udev device enumeration code uses alloca(strlen(str) + 1) to allocate stack buffers for unescaping ID_VENDOR_ENC and ID_MODEL_ENC udev properties. These property values originate from the udev database and could theoretically be manipulated through custom udev rules or crafted USB device descriptors. An excessively long property value would cause unbounded stack allocation. Add a 1024-byte cap on the alloca size and skip the unescape step for oversized values, falling back to the raw encoded string. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| aec | ||
| alsa | ||
| audioconvert | ||
| audiomixer | ||
| audiotestsrc | ||
| avb | ||
| bluez5 | ||
| control | ||
| ffmpeg | ||
| filter-graph | ||
| jack | ||
| libcamera | ||
| support | ||
| test | ||
| v4l2 | ||
| videoconvert | ||
| videotestsrc | ||
| volume | ||
| vulkan | ||
| meson.build | ||