[Gnash-commit] gnash ChangeLog server/parser/video_stream_def.cpp

[Bastiaan Jacques]

CVSROOT:        /sources/gnash
Module name:    gnash
Changes by:     Bastiaan Jacques <bjacques>     08/01/28 17:20:04

Modified files:
        .              : ChangeLog 
        server/parser  : video_stream_def.cpp 

Log message:
        Make sure ffmpeg doesn't read past the end of the buffer by appending 8 
zero bytes.

CVSWeb URLs:
http://cvs.savannah.gnu.org/viewcvs/gnash/ChangeLog?cvsroot=gnash&r1=1.5509&r2=1.5510
http://cvs.savannah.gnu.org/viewcvs/gnash/server/parser/video_stream_def.cpp?cvsroot=gnash&r1=1.34&r2=1.35

Patches:
Index: ChangeLog
===================================================================
RCS file: /sources/gnash/gnash/ChangeLog,v
retrieving revision 1.5509
retrieving revision 1.5510
diff -u -b -r1.5509 -r1.5510
--- ChangeLog   28 Jan 2008 15:16:49 -0000      1.5509
+++ ChangeLog   28 Jan 2008 17:20:01 -0000      1.5510
@@ -1,3 +1,8 @@
+2008-01-28 Bastiaan Jacques <address@hidden>
+
+       * server/parser/video_stream_def.cpp: Make sure ffmpeg doesn't read
+       past the end of the buffer by appending 8 zero bytes.
+
 2008-01-28 Sandro Santilli <address@hidden>
 
        * server/stream.{cpp,h}: fix comments about get_position and

Index: server/parser/video_stream_def.cpp
===================================================================
RCS file: /sources/gnash/gnash/server/parser/video_stream_def.cpp,v
retrieving revision 1.34
retrieving revision 1.35
diff -u -b -r1.34 -r1.35
--- server/parser/video_stream_def.cpp  27 Jan 2008 07:18:20 -0000      1.34
+++ server/parser/video_stream_def.cpp  28 Jan 2008 17:20:03 -0000      1.35
@@ -16,7 +16,7 @@
 // Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
 // 
-// $Id: video_stream_def.cpp,v 1.34 2008/01/27 07:18:20 bjacques Exp $
+// $Id: video_stream_def.cpp,v 1.35 2008/01/28 17:20:03 bjacques Exp $
 
 #include "video_stream_def.h"
 #include "video_stream_instance.h"
@@ -102,7 +102,8 @@
 
        unsigned int dataSize = in->get_tag_end_position() - in->get_position();
 
-       GstBuffer* buffer = gst_buffer_new_and_alloc(dataSize);
+       GstBuffer* buffer = gst_buffer_new_and_alloc(dataSize+8);
+       memset(GST_BUFFER_DATA(buffer)+dataSize, 0, 8);
 
        if (!buffer) {
                log_error(_("Failed to allocate a buffer of size %d advertised 
by SWF."),