search for: read_u16_l

...ng channels; /* Ok. At this point, we know we have a WAV file. Now we have to detect * whether we support the subtype, and we have to find the actual data @@ -453,12 +462,18 @@ int wav_open(FILE *in, oe_enc_opt *opt, unsigned char *oldbuf, int buflen) } format.format = READ_U16_LE(buf); - format.channels = READ_U16_LE(buf+2); + format.channels = channels = READ_U16_LE(buf+2); format.samplerate = READ_U32_LE(buf+4); format.bytespersec = READ_U32_LE(buf+8); format.align = READ_U16_LE(buf+12); format.samplesize = READ_U16_LE(buf+14); +...

...file including zero or a negative number of channels. Fixes for both CVE-2014-9638 and CVE-2014-9639 --- oggenc/audio.c | 6 ++++++ 1 file changed, 6 insertions(+) --- a/oggenc/audio.c +++ b/oggenc/audio.c @@ -455,6 +455,12 @@ int wav_open(FILE *in, oe_enc_opt *opt, format.align = READ_U16_LE(buf+12); format.samplesize = READ_U16_LE(buf+14); + if(format.channels <= 0) + { + fprintf(stderr,"ERROR: Invalid number of channels (%d) found in WAV file\n", format.channels); + return 0; + } + if(format.format == -2) /* WAVE_FORMAT_EXTENSIBLE */...

This is the first time I have gotten to the point of wanting to submit code to (what I would consider) a major project. Specifically, I have made a small change to oggenc/audio.c. I will explain the change if necessary, but that us not the purpose of this post. Primarily, I want to know how to submit changes? Mail it to someone? Via CVS commit? If CVS, how do I get access? Also, I

...genc\audio.c line 380) must be (instead the commented ones): {0,2,1,3,4}, // {0,1,2,3,4} {0,2,1,4,5,3} // {0,2,1,5,3,4} 2) New feature. Support for WAVE_FORMAT_EXTENSIBLE wav headers with only: if (format.format == WAVE_FORMAT_EXTENSIBLE && len > 25) format.format = READ_U16_LE(buf+24); 3) New feature. Support wav files 32 bits int. 4) New parameter --ignorelength. To support wav files > 4 GB or STDIN with datalength ignored." "If ogg, and flac, formats want support multichannel audio need manage correctly the channel order and: 1) The internal order is fr...

This patch to opus-tools adds optional support to WavPack lossless format as input to opusenc. Like support to FLAC, it depends on an external library, libwavpack, and may be disabled on configure. Lucas Clemente Vella (1): Reading input from WavPack files. Makefile.am | 7 +- configure.ac | 37 ++++++++ src/audio-in.c | 71 ++++++++------- src/opusenc.c | 19 +++- src/opusenc.h