Am 02.07.2012 11:15, schrieb Fabian Greffrath:
_open_device(). I haven't digged through libao sources that much, but
I believe a more robust check in _sanitize_matrix() (which is where
the crash actually occurs) may be appropriate.

The critical part is _sanitize_matrix() calling "char *ret = calloc(strlen(matrix)+1,1);" in src/audio_out.c line 633, whereas "matrix" can (and will) be garbage.

 - Fabian



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to