An additional defense in the Vorbis codec.

README.chromium

 Name: ffmpeg
 Version: 0.9.7
 
 Description:
 Contains the sources used to compile FFmpeg binaries used by Google Chrome and
 Chromium.
 
 The FFmpeg source is from ToT of the main ffmpeg branch:
   http://git.videolan.org/?p=ffmpeg.git;a=commit;h=bb258fb995a42112d1fe14f53ec599b2cd19b707
   Date: Tue, 12 Jul 2011 22:42:11
@@ skipping 48 matching lines @@
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/39_VP8_fix_oob_read_writes.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/40_MKV_fix_oob_write.patch
        patch -p1 --no-backup-if-mismatch < ../patches/ugly/41_matroska_cluster_incremental.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/42_vp8_fix_segmentation_maps.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/43_mkv_seekahead_revalidate.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/44_vorbis_oob_read.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/45_mkv_fix_segmap_cache_overflow.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/46_vp3_fix_double_free_invalid_read.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/47_vp3_fix_infloop_and_memleak.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/48_vorbis_residue_buffer.patch
+       patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/49_vorbis_buffer_defense.patch
        cd ..
 
 
 NOTE: Under Windows it is recommended to use Chromium's MinGW/MSYS environment
 or 7-Zip to extract the archives.  We've experienced issues when using WinRAR.
 
 Since FFmpeg is sandboxed inside the render process, we're only interested in
 building the absolute minimum.
 
 Refer to build_ffmpeg.sh for configuration flags for Chromium and Google Chrome.
@@ skipping 238 matching lines @@
        diff -wurp -N orig ffmpeg >patches/to_upstream/47_vp3_fix_infloop_and_memleak.patch
 
        rm -rf orig
        cp -R ffmpeg orig
        cd ffmpeg
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/48_vorbis_residue_buffer.patch
        cd ..
        diff -wurp -N orig ffmpeg
        diff -wurp -N orig ffmpeg >patches/to_upstream/48_vorbis_residue_buffer.patch
 
+       rm -rf orig
+       cp -R ffmpeg orig
+       cd ffmpeg
+       patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/48_vorbis_residue_buffer.patch
+       cd ..
+       diff -wurp -N orig ffmpeg
+       diff -wurp -N orig ffmpeg >patches/to_upstream/49_vorbis_buffer_defense.patch
+
 Testing
   Updates should be tested against
   a) http://wiki.xiph.org/TheoraTestsuite
   b) WebKit Layout Tests
      http://www.chromium.org/developers/testing/webkit-layout-tests
        make -r test_shell BUILDTYPE=Debug -j16
        make -r ImageDiff BUILDTYPE=Debug -j16
        make -r DumpRenderTree BUILDTYPE=Debug -j16
        ./webkit/tools/layout_tests/run_webkit_tests.sh --debug media/\*