Re: Multiple bugs/vulns(?)
Joshua Rogers <[email protected]>
| Newsgroups | gmane.comp.audio.mp3.lame |
|---|---|
| Message-ID | <[email protected]> |
On 08/11/14 03:18, Robert Hegemann wrote: > > => looks like junk crept into the sign bit, if we ignore the upper > 16 bits, it looks like writing application meant typical 44.1 kHz. > Anyway, lame should do sanity check and reject this file with: > "unsupported sample rate: 0x8000ac44" Perhaps a check should also be put in place, where if (samplerate_in < 1) then exit, since it seems that it actually overflows($18 = -2147439548). 2147483647(max int) - 2147439548 = 44099. Thanks for the analysis, too. Thanks, -- -- Joshua Rogers <https://internot.info/> ------------------------------------------------------------------------------ _______________________________________________ Lame-dev mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/lame-dev