On Ubuntu 12.04 LTS, rdairplay crashes whenever you play a track with ISRC
or ISCI metadata and Now and Next data is being sent to RLMs. I tracked the
problem down to a benign buffer overflow in RLMHost's handling of ISRC and
ISCI codes which nevertheless triggers a _FORTIFY_SOURCE runtime buffer
overflow check. Basically the rlm_isrc and rlm_isci members of the rlm_pad
struct are exactly the size of ISRC and ISCI codes, with no room for a null
terminator. This causes sprintf to overflow these buffers when it copies
the codes over. The attached patch fixes this issue.

Attachment: rlm.patch
Description: Binary data

_______________________________________________
Rivendell-dev mailing list
[email protected]
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev

Reply via email to