[SCM] mplayer packaging branch, etch, updated. 7476e04ba26079b38fc67353c8a73fa9bc612630

[siretart at users.alioth.debian.org]

The following commit has been merged in the etch branch:
commit 6fa1bc7a4446ce897a17ad9d4c5456ddd8f7031b
Author: Reinhard Tartler <siretart at tauware.de>
Date:   Fri Apr 17 20:02:04 2009 +0200

    update patch for CVE-2009-0385.patch
    
    the first patch candidate had unexplained discrepancy compared to the
    upstream commit.

diff --git a/debian/patches/CVE-2009-0385.patch b/debian/patches/CVE-2009-0385.patch
index de78108..46f1161 100644
--- a/debian/patches/CVE-2009-0385.patch
+++ b/debian/patches/CVE-2009-0385.patch
@@ -14,7 +14,7 @@ Patch AKA CVE-2009-0385
                  return AVERROR_INVALIDDATA;
              }
              current_track = LE_32(&header[i + 8]);
-+            if((unsigned)current_track->track_count >= UINT_MAX / sizeof(AudioTrack - 1))
++            if((unsigned)fourxm->track_count >= UINT_MAX / sizeof(AudioTrack - 1))
 +                return -1;
              if (current_track + 1 > fourxm->track_count) {
                  fourxm->track_count = current_track + 1;
diff --git a/libavformat/4xm.c b/libavformat/4xm.c
index ec9a885..15a4e46 100644
--- a/libavformat/4xm.c
+++ b/libavformat/4xm.c
@@ -161,7 +161,7 @@ static int fourxm_read_header(AVFormatContext *s,
                 return AVERROR_INVALIDDATA;
             }
             current_track = LE_32(&header[i + 8]);
-	    if((unsigned)current_track >= UINT_MAX / sizeof(AudioTrack) - 1)
+	    if((unsigned)fourxm->track_count >= UINT_MAX / sizeof(AudioTrack) - 1)
                 return -1;
             if (current_track + 1 > fourxm->track_count) {
                 fourxm->track_count = current_track + 1;

-- 
mplayer packaging