aboutsummaryrefslogtreecommitdiffstats
path: root/main/wavpack/CVE-2019-1010319.patch
diff options
context:
space:
mode:
Diffstat (limited to 'main/wavpack/CVE-2019-1010319.patch')
-rw-r--r--main/wavpack/CVE-2019-1010319.patch23
1 files changed, 23 insertions, 0 deletions
diff --git a/main/wavpack/CVE-2019-1010319.patch b/main/wavpack/CVE-2019-1010319.patch
new file mode 100644
index 00000000000..6a53ef8fbbc
--- /dev/null
+++ b/main/wavpack/CVE-2019-1010319.patch
@@ -0,0 +1,23 @@
+From 33a0025d1d63ccd05d9dbaa6923d52b1446a62fe Mon Sep 17 00:00:00 2001
+From: David Bryant <david@wavpack.com>
+Date: Tue, 5 Mar 2019 21:21:48 -0800
+Subject: [PATCH] issue #68: clear WaveHeader at start to prevent uninitialized
+ read
+
+---
+ cli/wave64.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/cli/wave64.c b/cli/wave64.c
+index 7beffe6..59548b1 100644
+--- a/cli/wave64.c
++++ b/cli/wave64.c
+@@ -56,6 +56,7 @@ int ParseWave64HeaderConfig (FILE *infile, char *infilename, char *fourcc, Wavpa
+ int format_chunk = 0;
+ uint32_t bcount;
+
++ CLEAR (WaveHeader);
+ infilesize = DoGetFileSize (infile);
+ memcpy (&filehdr, fourcc, 4);
+
+