[PATCH] fixed #2493

Gbp-Pq: Name CVE-2023-3291.patch

diff --git a/src/filters/reframe_mp3.c b/src/filters/reframe_mp3.c
index 524b07d5ce109dac98018aa87ea1284b2662b0a7..b2587043b436696da9b1283b201dfc9a0dfbca68 100644 (file)
--- a/src/filters/reframe_mp3.c
+++ b/src/filters/reframe_mp3.c
@@ -250,7 +250,7 @@ void id3dmx_flush(GF_Filter *filter, u8 *id3_buf, u32 id3_buf_size, GF_FilterPid
                        break;
                }
 
-               if (buf_alloc<=fsize) {
+               if (buf_alloc <= fsize+2) {
                        buf = gf_realloc(buf, fsize+2);
                        buf_alloc = fsize+2;
                }