| Index: chromium/patches/ugly/30_enforce_mp3_oob.patch
|
| diff --git a/chromium/patches/ugly/30_enforce_mp3_oob.patch b/chromium/patches/ugly/30_enforce_mp3_oob.patch
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..50f688b0e6f28a92c11cd465a60962569696015a
|
| --- /dev/null
|
| +++ b/chromium/patches/ugly/30_enforce_mp3_oob.patch
|
| @@ -0,0 +1,11 @@
|
| +diff -wurp -N orig/libavcodec/mpegaudiodec.c ffmpeg/libavcodec/mpegaudiodec.c
|
| +--- orig/libavcodec/mpegaudiodec.c 2011-07-12 20:50:08.712944821 -0700
|
| ++++ ffmpeg/libavcodec/mpegaudiodec.c 2011-07-12 20:50:08.782964340 -0700
|
| +@@ -1704,6 +1704,7 @@ static int mp_decode_frame(MPADecodeCont
|
| + OUT_INT *samples_ptr;
|
| +
|
| + init_get_bits(&s->gb, buf + HEADER_SIZE, (buf_size - HEADER_SIZE)*8);
|
| ++ s->gb.buffer_enforcing = 1;
|
| +
|
| + /* skip error protection field */
|
| + if (s->error_protection)
|
|
|