The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/media/libtremor/bug719612.patch	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,21 @@
     1.4 +diff --git a/media/libtremor/lib/tremor_floor1.c b/media/libtremor/lib/tremor_floor1.c
     1.5 +--- a/media/libtremor/lib/tremor_floor1.c
     1.6 ++++ b/media/libtremor/lib/tremor_floor1.c
     1.7 +@@ -103,16 +103,17 @@ static vorbis_info_floor *floor1_unpack 
     1.8 + 
     1.9 +   /* read the post list */
    1.10 +   info->mult=oggpack_read(opb,2)+1;     /* only 1,2,3,4 legal now */ 
    1.11 +   rangebits=oggpack_read(opb,4);
    1.12 +   if(rangebits<0)goto err_out;
    1.13 + 
    1.14 +   for(j=0,k=0;j<info->partitions;j++){
    1.15 +     count+=info->class_dim[info->partitionclass[j]]; 
    1.16 ++    if(count>VIF_POSIT)goto err_out;
    1.17 +     for(;k<count;k++){
    1.18 +       int t=info->postlist[k+2]=oggpack_read(opb,rangebits);
    1.19 +       if(t<0 || t>=(1<<rangebits))
    1.20 + 	goto err_out;
    1.21 +     }
    1.22 +   }
    1.23 +   info->postlist[0]=0;
    1.24 +   info->postlist[1]=1<<rangebits;