mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-04-29 06:46:38 -04:00
Memory Safety: Medium Multiple calloc() calls for node port arrays and the graph handle array were not checked for NULL returns. If memory allocation fails, the code immediately dereferences the NULL pointers in subsequent loops, causing a crash. An attacker who can influence the filter graph configuration (e.g., through config files specifying many ports) could potentially trigger this condition. Fixed by adding NULL checks after all unchecked calloc calls and properly cleaning up on failure. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| examples | ||
| include | ||
| include-private/spa-private | ||
| lib | ||
| plugins | ||
| tests | ||
| tools | ||
| meson.build | ||