wav_write_header: don't read past the array end 22/211322/1 accepted/tizen/unified/20190806.072143 submit/tizen/20190805.090659
authorEmilio Pozuelo Monfort <pochu27@gmail.com>
Tue, 5 Mar 2019 10:27:17 +0000 (11:27 +0100)
committerSeungbae Shin <seungbae.shin@samsung.com>
Thu, 1 Aug 2019 09:55:43 +0000 (18:55 +0900)
commitba96db7cb70e6c8fe2e9d16d422f3a8b315a13e3
tree89a22c600efe8920c6a8024c95e0889ed1f9ab5a
parentc88264a6e2bc893c5e6ca99e1fc1c4c23815075d
wav_write_header: don't read past the array end

If loop_count is bigger than the array, truncate it to the array
length (and not to 32k).

CVE-2019-3832

Change-Id: Icd3f6dc355fab82a9694798d43f00512ab3cef10
src/wav.c