libgme / game-music-emu

Blargg's video game music emulation library, which allows audio applications to easily add playback support for the music of many classic video game consoles.
GNU Lesser General Public License v2.1
68 stars 12 forks source link

Out of bounds memory reads/writes in SNES/SPC module #6

Closed Wohlstand closed 7 years ago

Wohlstand commented 7 years ago

Original report by Sebastian Dröge (Bitbucket: [Sebastian Dröge](https://bitbucket.org/Sebastian Dröge), ).


https://scarybeastsecurity.blogspot.gr/2016/12/redux-compromising-linux-using-snes.html

At the very bottom, he also provides a patch.

Wohlstand commented 7 years ago

Original comment by Michael Pyne (Bitbucket: mpyne, GitHub: mpyne).


Testing the patch now, seems to work fine. I guess this is as good a time as any to release 0.6.1...

Wohlstand commented 7 years ago

Original comment by Michael Pyne (Bitbucket: mpyne, GitHub: mpyne).


Should now be resolved with commit d48c1c8de04deb6a151524acb3cd1a253288822f

I have tagged it as 0.6.1 and will prepare a tarball for release. I have tested 0.6.1 with my local gstreamer installation and verified that it still seems to work, but I have not engaged in testing that is any more involved than that.

Wohlstand commented 7 years ago

Original comment by Sebastian Dröge (Bitbucket: [Sebastian Dröge](https://bitbucket.org/Sebastian Dröge), ).


A new release would definitely be great to have, thanks! Also thanks for merging this so fast :)

Wohlstand commented 7 years ago

Original comment by Michael Pyne (Bitbucket: mpyne, GitHub: mpyne).


In case you haven't seen it the 0.6.1 release is available on the Downloads page and is referenced on this repo's Wiki as well. I don't exactly have a mailing list going otherwise I'd announce it there too.