Am Donnerstag, den 19.02.2015, 07:21 +0100 schrieb Fabian Greffrath: 
> 18446744073709407040 as size_t type, i.e. "unlimited". And indeed
> fread() returns 3967 bytes into the samples_read variable.
> Unfortunately, these 3967 bytes have been written into the static int
> array "sample_buffer" which was of size 2304. Boom, stack corrupted!

No, wait, that should fit. I think the real problem is that the value of
samples_read is used in the subsequent line to point the op* pointer way
beyond the sample_buffer[] array and override the values there in the
GA_URS_IFLOOP() loops that follow.

- Fabian

_______________________________________________
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Reply via email to