mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-05-20 19:28:11 +02:00
Memory Safety: Critical write_event() returns a negative int on error (-ENOSPC or -ERANGE), but its return value was added directly to the uint32_t len variable without checking. A negative return value would wrap len to a very large number due to unsigned integer conversion, causing subsequent buffer writes to go far out of bounds. This could lead to stack corruption and potential code execution. Fix by checking the return value of write_event() before using it. If write_event() fails, abort the flush operation safely. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apple-midi.h | ||
| audio.c | ||
| midi.c | ||
| opus.c | ||
| ptp.h | ||
| rtp.h | ||
| sap.h | ||
| stream.c | ||
| stream.h | ||