flxdec: add some write bounds checking
authorMatthew Waters <matthew@centricular.com>
Tue, 22 Nov 2016 08:05:00 +0000 (19:05 +1100)
committerMatthew Waters <matthew@centricular.com>
Tue, 22 Nov 2016 11:42:41 +0000 (22:42 +1100)
commitbf43f44fcfada5ec4a3ce60cb374340486fe9fac
treeb894cf770433adcc85f118e23ad52d6e61abab2c
parent45843ab9a2d883607f2f9e54c1c3c143e0c7ec2f
flxdec: add some write bounds checking

Without checking the bounds of the frame we are writing into, we can
write off the end of the destination buffer.

https://scarybeastsecurity.blogspot.dk/2016/11/0day-exploit-advancing-exploitation.html

https://bugzilla.gnome.org/show_bug.cgi?id=774834
gst/flx/gstflxdec.c