# HG changeset patch # User michael # Date 1204666761 0 # Node ID 28e45bf84973a0936b1ecec74cde131dc7bc5fc3 # Parent 0cc3651e0bb2458c0e52827310653e43716b26f5 Prevent segfault due to reading over the end of the input buffer. diff -r 0cc3651e0bb2 -r 28e45bf84973 apedec.c --- a/apedec.c Tue Mar 04 18:38:32 2008 +0000 +++ b/apedec.c Tue Mar 04 21:39:21 2008 +0000 @@ -256,7 +256,10 @@ static inline void range_dec_normalize(APEContext * ctx) { while (ctx->rc.range <= BOTTOM_VALUE) { - ctx->rc.buffer = (ctx->rc.buffer << 8) | bytestream_get_byte(&ctx->ptr); + ctx->rc.buffer <<= 8; + if(ctx->ptr < ctx->data_end) + ctx->rc.buffer += *ctx->ptr; + ctx->ptr++; ctx->rc.low = (ctx->rc.low << 8) | ((ctx->rc.buffer >> 1) & 0xFF); ctx->rc.range <<= 8; }