File: CVE-2023-43641-fix.patch

package info (click to toggle)
libcue 2.2.1-4.2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 284 kB
  • sloc: ansic: 1,273; yacc: 285; lex: 139; makefile: 13
file content (17 lines) | stat: -rw-r--r-- 557 bytes parent folder | download | duplicates (2) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
 
Description: fix for CVE-2023-43641
Author: Kevin Backhouse <kevinbackhouse@github.com>
Applied-Upstream: https://github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e

Index: libcue/cd.c
===================================================================
--- libcue.orig/cd.c
+++ libcue/cd.c
@@ -339,7 +339,7 @@ track_get_rem(const Track* track)
 
 void track_set_index(Track *track, int i, long ind)
 {
-	if (i > MAXINDEX) {
+	if (i < 0 || i > MAXINDEX) {
 		fprintf(stderr, "too many indexes\n");
                 return;
         }