1. 24 Sep, 2008 5 commits
  2. 23 Sep, 2008 33 commits
  3. 17 Sep, 2008 2 commits
    • Max Kellermann's avatar
      mp3: fix buffer overflow when max_frames is too large · 913028a7
      Max Kellermann authored
      The function decodeFirstFrame() allocates memory based on data from
      the mp3 header.  This can make the buffer size allocation overflow, or
      lead to a DoS attack with a very large buffer.  Cap this buffer at 8
      million frames, which should really be enough for reasonable files.
      913028a7
    • Max Kellermann's avatar
      client: check expired after client_process_line() · ef0e2fdc
      Max Kellermann authored
      The assertion on "!client_is_expired(client)" was wrong, because
      writing the command response may cause the client to become expired.
      Replace that assertion with a check.
      ef0e2fdc