libretro/scummvm
1
0
Fork 0
mirror of https://github.com/libretro/scummvm.git synced 2025-01-01 15:09:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

SCI: Truncate channel data in case it goes beyond resource size

Browse Source 
Fixes invalid memory access during kq5 floppy ending
This commit is contained in:
Martin Kiewitz 2016-03-08 03:36:02 +01:00
parent 343f1c7f8b
commit 6779340b24
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
engines/sci/resource_audio.cpp
View File

@ -688,6 +688,12 @@ SoundResource::SoundResource(uint32 resourceNr, ResourceManager *resMan, SciVers
channel->data = resource->data + dataOffset;
channel->size = READ_LE_UINT16(data + 4);
if (dataOffset + channel->size > resource->size) {
warning("Invalid size inside sound resource %d: track %d, channel %d", resourceNr, trackNr, channelNr);
channel->size = resource->size - dataOffset;
}
channel->curPos = 0;
channel->number = *channel->data;