Check that the APE tag length is valid before allocating a buffer for it.

git-svn-id: https://svn.musicpd.org/mpd/trunk@5098 09075e82-0dd4-0310-85a5-a0d7c8717e4f

Check that the APE tag length is valid before allocating a buffer for it.
fc4868a0 · J. Alexander Treuman · 08003904 · fc4868a0
Commit fc4868a0 authored Nov 26, 2006 by J. Alexander Treuman
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

tag.c src/tag.c +2 -0

No files found.
--- a/src/tag.c
+++ b/src/tag.c
@@ -421,6 +421,8 @@ MpdTag *apeDup(char *file)

 	/* read tag into buffer */
 	tagLen -= sizeof(footer);
+	if (tagLen <= 0)
+		goto fail;
 	buffer = xmalloc(tagLen);
 	if (fread(buffer, 1, tagLen, fp) != tagLen)
 		goto fail;