aboutsummaryrefslogtreecommitdiffstats
path: root/src/decoder/fluidsynth_plugin.c
diff options
context:
space:
mode:
authorMax Kellermann <max@duempel.org>2009-07-19 17:38:46 +0200
committerMax Kellermann <max@duempel.org>2009-07-19 17:38:46 +0200
commit0ce727d5d459c2319edc507eb2e71af8a1c9d5dc (patch)
treec05bb8dc3fdb6339775c3b423cca318f75fd65a2 /src/decoder/fluidsynth_plugin.c
parente3ff0ab6d1f378aec9b98fe930ca42d1f428409e (diff)
downloadmpd-0ce727d5d459c2319edc507eb2e71af8a1c9d5dc.tar.gz
mpd-0ce727d5d459c2319edc507eb2e71af8a1c9d5dc.tar.xz
mpd-0ce727d5d459c2319edc507eb2e71af8a1c9d5dc.zip
ape: added protection against large memory allocations
The function tag_ape_load() retrieves a 32 bit unsigned integer from the input file, and passes it to g_malloc(). This is dangerous, and may be used for a denial of service attack on MPD.
Diffstat (limited to 'src/decoder/fluidsynth_plugin.c')
0 files changed, 0 insertions, 0 deletions