Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A potential bug of NPD #92

Open
ash1852 opened this issue Sep 5, 2022 · 0 comments
Open

A potential bug of NPD #92

ash1852 opened this issue Sep 5, 2022 · 0 comments

Comments

@ash1852
Copy link

ash1852 commented Sep 5, 2022

Hi, I found a potential null pointer dereference bug in the project source code of vorbis, and I have shown the execution sequence of the program that may generate the bug on the graph below. The red text illustrates the steps that generate the bug, the red arrows represent the control flow,the file path can be seen in the blue framed section.
1662360760592

Although the code shown is for version 1.3.6 but is still exist in current version

vorbis/lib/vorbisfile.c

Lines 898 to 902 in 84c0236

if(initial){
char *buffer=ogg_sync_buffer(&vf->oy,ibytes);
memcpy(buffer,initial,ibytes);
ogg_sync_wrote(&vf->oy,ibytes);
}

would you can help to check if this bug is true?thank you for your effort and patience!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant