diff options
| author | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-01-11 13:49:08 +0000 |
|---|---|---|
| committer | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-01-11 13:49:08 +0000 |
| commit | f3e691cf556bd4ad1338f222ffcf5eaecafd6a24 (patch) | |
| tree | e2caa09dab36cbf448d998255688c51d570eb14c /src/input/libreal/rmff.h | |
| parent | ff41358936294b3522429eaecc15edeba1bc1880 (diff) | |
| download | xine-lib-f3e691cf556bd4ad1338f222ffcf5eaecafd6a24.tar.gz xine-lib-f3e691cf556bd4ad1338f222ffcf5eaecafd6a24.tar.bz2 | |
Fix a buffer overflow in the RTSP header-handling code.
CVE-2008-0225; ported from mplayer changeset 22821.
Diffstat (limited to 'src/input/libreal/rmff.h')
| -rw-r--r-- | src/input/libreal/rmff.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/input/libreal/rmff.h b/src/input/libreal/rmff.h index d39942088..5288fc558 100644 --- a/src/input/libreal/rmff.h +++ b/src/input/libreal/rmff.h @@ -39,6 +39,12 @@ #define RMFF_HEADER_SIZE 0x12 +#define RMFF_FILEHEADER_SIZE 18 +#define RMFF_PROPHEADER_SIZE 50 +#define RMFF_MDPRHEADER_SIZE 46 +#define RMFF_CONTHEADER_SIZE 18 +#define RMFF_DATAHEADER_SIZE 18 + #define FOURCC_TAG( ch0, ch1, ch2, ch3 ) \ (((long)(unsigned char)(ch3) ) | \ ( (long)(unsigned char)(ch2) << 8 ) | \ |