vorbis_parse: check writes to GstOggStream.vorbis_mode_sizes
authorMathieu Duponchelle <mathieu@centricular.com>
Wed, 2 Oct 2024 13:16:30 +0000 (15:16 +0200)
committerGStreamer Marge Bot <gitlab-merge-bot@gstreamer-foundation.org>
Tue, 3 Dec 2024 12:15:24 +0000 (12:15 +0000)
commit30fa21ac45ef5dad2fef0d98f0e7130c75f0b628
treeade4396bf6e1b81d8e19ce9d6fdd55573bcceb3e
parent5b205225e2c6a19ddcace350fdc18a0edf87bcb5
vorbis_parse: check writes to GstOggStream.vorbis_mode_sizes

Thanks to Antonio Morales for finding and reporting the issue.

Fixes GHSL-2024-117 Fixes gstreamer#3875

Also perform out-of-bounds check for accesses to op->packet

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8050>
subprojects/gst-plugins-base/ext/ogg/vorbis_parse.c