Bug#354436: Bug#363127: CVE-2006-1664: Malformed MPEG Stream Buffer Overflow Vulnerability

[Darren Salt]

I demand that Reinhard Tartler may or may not have written...

[snip]
> I prepared an upload here:
> http://siretart.tauware.de/upload-queue/xine-lib_1.1.1-2.dsc

It needs the attached patch (committed to CVS by Matthias Hopf).

-- 
| Darren Salt    | linux or ds at              | nr. Ashington, | Toon
| RISC OS, Linux | youmustbejoking,demon,co,uk | Northumberland | Army
| + Output less CO2 => avoid massive flooding.    TIME IS RUNNING OUT *FAST*.

Buy a P4 so that you can reboot faster.

diff -u -r1.117 -r1.118
--- xine-lib/src/input/input_http.c     2 Jun 2006 22:44:58 -0000       1.117
+++ xine-lib/src/input/input_http.c     6 Jun 2006 16:39:25 -0000       1.118
@@ -900,10 +900,10 @@
        len = 0;
     } else
       len ++;
-    if ( len >= buflen ) {
+    if ( len >= BUFSIZE ) {
        _x_message(this->stream, XINE_MSG_PERMISSION_ERROR, this->mrl, NULL);
        xine_log (this->stream->xine, XINE_LOG_MSG,
-         _("input_http: buffer exhausted after %d bytes."), buflen);
+         _("input_http: buffer exhausted after %d bytes."), BUFSIZE);
        return 0;
     }
   }