From 33d9b6b3da9558514883ba50c3300647eaedb816 Mon Sep 17 00:00:00 2001 From: Lucas Teske Date: Sun, 13 Jan 2019 17:11:13 -0200 Subject: [PATCH] Fix for SIGSEGV when bad payload comes in --- src/decode.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/decode.c b/src/decode.c index edb5af1..378cab7 100644 --- a/src/decode.c +++ b/src/decode.c @@ -597,6 +597,9 @@ static int m_se(struct aec_stream *strm) while (i < strm->block_size) { m = direct_get_fs(strm); + if (2 * m + 1 > sizeof(state->se_table)) { + return M_ERROR; + } d1 = m - state->se_table[2 * m + 1]; if ((i & 1) == 0) {