Commit 81002442 authored by Timothy B. Terriberry's avatar Timothy B. Terriberry

Fix a buffer overflow in op_read_stereo().

For multichannel files, this potentially caused writes beyond the
 end of the output buffer provided by the user.
parent 7d672dd2
......@@ -3052,7 +3052,7 @@ static int op_float2short_stereo_filter(OggOpusFile *_of,
_nsamples=op_stereo_filter(_of,_src,_nsamples*2,
_src,_nsamples,_nchannels);
}
op_shaped_dither16(_of,dst,_src,_nsamples,_nchannels);
op_shaped_dither16(_of,dst,_src,_nsamples,2);
}
return _nsamples;
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment