[vlc-commits] ogg: Fix a heap buffer overflow.

[Hugo Beauzée-Luyssen]

vlc | branch: master | Hugo Beauzée-Luyssen <beauze.h at gmail.com> | Mon Apr 30 11:50:17 2012 +0200| [6a41b030f5b7fcbe5ad7249c374172c0fdc29add] | committer: Hugo Beauzée-Luyssen

ogg: Fix a heap buffer overflow.

Reported by: An anonymous contributor working with the SecuriTeam Secure
Disclosure
program (http://www.beyondsecurity.com/ssd.html)

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=6a41b030f5b7fcbe5ad7249c374172c0fdc29add
---

 modules/demux/ogg.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/modules/demux/ogg.c b/modules/demux/ogg.c
index bb693d1..65f4a44 100644
--- a/modules/demux/ogg.c
+++ b/modules/demux/ogg.c
@@ -640,7 +640,7 @@ static void Ogg_DecodePacket( demux_t *p_demux,
             if( p_stream->p_headers )
             {
                 memcpy( (unsigned char *)p_stream->p_headers + p_stream->i_headers - p_oggpacket->bytes,
-                        p_oggpacket->packet, p_stream->i_headers );
+                        p_oggpacket->packet, p_oggpacket->bytes );
             }
             else
             {