mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-03-19 05:33:49 -04:00
e4693ebc83
Patch by David Nowotny In make_matrix (channelmix-ops.c), the matrix-filling loop at the done: label allows the index i (and j in the inner loop) to grow beyond MAX_CHANNELS when dst_paired/src_paired has sparse bits set. In that case the continue fires for most values of i < CHANNEL_BITS, so i advances much faster than ic, and matrix[i][j] reads off the end of the stack-allocated array. Add bounds guards to both loop conditions so i and j cannot exceed MAX_CHANNELS. Fixes #5176 |
||
|---|---|---|
| .. | ||
| aec | ||
| alsa | ||
| audioconvert | ||
| audiomixer | ||
| audiotestsrc | ||
| avb | ||
| bluez5 | ||
| control | ||
| ffmpeg | ||
| filter-graph | ||
| jack | ||
| libcamera | ||
| support | ||
| test | ||
| v4l2 | ||
| videoconvert | ||
| videotestsrc | ||
| volume | ||
| vulkan | ||
| meson.build | ||