Original commit message from CVS:
* ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
Fix bounds checking of mode in Speex header, which may
produce negative numbers in speex < 1.1.12
+2008-04-11 Jan Schmidt <Jan.Schmidt@sun.com>
+
+ * ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header):
+ Fix bounds checking of mode in Speex header, which may
+ produce negative numbers in speex < 1.1.12
+
2008-04-09 Tim-Philipp Müller <tim at centricular dot net>
* gst/goom/Makefile.am:
if (!dec->header)
goto no_header;
- if (dec->header->mode >= SPEEX_NB_MODES)
+ if (dec->header->mode >= SPEEX_NB_MODES || dec->header->mode < 0)
goto mode_too_old;
dec->mode = (SpeexMode *) speex_mode_list[dec->header->mode];