From 6a7922a15331ef5065c7637a04d2c78a076f840c Mon Sep 17 00:00:00 2001 From: divverent Date: Tue, 26 Jun 2007 20:25:58 +0000 Subject: [PATCH 1/1] fix buffer overrun in vorbis decoder git-svn-id: svn://svn.icculus.org/twilight/trunk/darkplaces@7453 d7cf8633-e32d-0410-b094-e92efae38249 --- snd_ogg.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/snd_ogg.c b/snd_ogg.c index 1b4b148f..9016656f 100644 --- a/snd_ogg.c +++ b/snd_ogg.c @@ -546,6 +546,8 @@ static const snd_buffer_t* OGG_FetchSound (channel_t* ch, unsigned int* start, u return NULL; } newlength = per_sfx->format.speed * factor; // -> 1 sec of sound before resampling + if(newlength > sizeof(resampling_buffer)) + newlength = sizeof(resampling_buffer); // Decompress in the resampling_buffer #if BYTE_ORDER == BIG_ENDIAN -- 2.39.2