[Bug 392372] Re: cueconvert crashes when converting .toc to .cue

Christian Hudon chrish at pianocktail.org
Tue Dec 29 18:56:17 UTC 2009


After some digging, it turns out that the problem was a buffer whose
size was tool small to include the null character at the end. A
sprintf() of a string of size 9 into a 9 bytes buffer: sprintf(msf,
"%02d:%02d:%02d", minutes, seconds, frames);

The attached patch fixes the problem by increasing the size of the msf
char array to 10 character (so it can also hold the null character at
the end of the string). Please apply.

** Attachment added: "Fixes buffer overflow"
   http://launchpadlibrarian.net/37273741/cuetools.patch

-- 
cueconvert crashes when converting .toc to .cue
https://bugs.launchpad.net/bugs/392372
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs




More information about the universe-bugs mailing list