WINEALSA: prevent scribbling past end of structure

Alex Villací­s Lasso a_villacis at palosanto.com
Tue Jan 10 10:15:12 CST 2006


While testing patches for MSACM, I found that winealsa crashes reliably 
whenever an attempt is made to play a MS-ADPCM file with sndPlaySound(). 
Other sound drivers (notably OSS) do not crash. The core problem is a 
memcpy that scribbles past the end of a structure into the pointer to 
the ALSA device -> random memory access -> crash. Attached patch fixes 
issue.

Changelog:
* Ensure that copy_format() will not write past end of referenced 
WAVEFORMATPCMEX structure.

Alex Villacís Lasso

-------------- next part --------------
A non-text attachment was scrubbed...
Name: wine-winmm-winealsa-copy_format.patch
Type: text/x-patch
Size: 1166 bytes
Desc: not available
Url : http://www.winehq.org/pipermail/wine-patches/attachments/20060110/8649b849/wine-winmm-winealsa-copy_format.patch


More information about the wine-patches mailing list