[Lame-dev] null pointer access in mpglib/interface.c

[Andreas W. <aw...@ma...>]

LAME version 3.94 (alpha 14, Aug 19 2003 16:38:55) (and earlier)

Hi,

one of my mp3 files caused a segmentation fault.

mpglib/interface.c: line 232, in check_vbr_header()

       buf  =3D buf->next;
232:  pos =3D buf->pos;	<-- segmentation fault if buf is NULL
       if(!buf)  return -1; /* fatal error */ <-- this is not reached in=20
case buf is NULL


to fix it, exchange lines 232 and 233
       buf  =3D buf->next;
       if(!buf)  return -1; /* fatal error */
       pos =3D buf->pos;

Andreas
--=20
Andreas Westfeld, 0432 01CC F511 9E2B 0B57 5993 0B22 98F8 4AD8 EEEA
<wes...@in...> http://www.inf.tu-dresden.de/~aw4
TU Dresden Fakult=E4t Informatik, Institut f=FCr Systemarchitektur
Datenschutz und Datensicherheit, Tel. +49-351-463-38350