[vlc-commits] ogg: Fix a heap buffer overflow.

[Hugo Beauzée-Luyssen]

vlc/vlc-1.1 | branch: master | Hugo Beauzée-Luyssen <beauze.h at gmail.com> | Mon Apr 30 11:50:17 2012 +0200| [dc26d9c904766a30504fff9350cb1d8a9e32deef] | committer: Jean-Baptiste Kempf

ogg: Fix a heap buffer overflow.

Reported by: An anonymous contributor working with the SecuriTeam Secure
Disclosure
program (http://www.beyondsecurity.com/ssd.html)

Signed-off-by: Jean-Baptiste Kempf <jb at videolan.org>
(cherry picked from commit 16e9e126333fb7acb47d363366fee3deadc8331e)

> http://git.videolan.org/gitweb.cgi/vlc/vlc-1.1.git/?a=commit;h=dc26d9c904766a30504fff9350cb1d8a9e32deef
---

 modules/demux/ogg.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/demux/ogg.c b/modules/demux/ogg.c
index 6fc6a0e..a51b0fa 100644
--- a/modules/demux/ogg.c
+++ b/modules/demux/ogg.c
@@ -674,7 +674,7 @@ static void Ogg_DecodePacket( demux_t *p_demux,
             if( p_stream->p_headers )
             {
                 memcpy( p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes,
-                        p_oggpacket->packet, p_stream->i_headers );
+                        p_oggpacket->packet, p_oggpacket->bytes );
             }
             else
             {