An additional defense in the Vorbis codec.

README.chromium

Index: README.chromium
===================================================================
--- README.chromium	(revision 107662)
+++ README.chromium	(working copy)
@@ -66,6 +66,7 @@
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/46_vp3_fix_double_free_invalid_read.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/47_vp3_fix_infloop_and_memleak.patch
        patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/48_vorbis_residue_buffer.patch
+       patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/49_vorbis_buffer_defense.patch
        cd ..
 
 
@@ -324,6 +325,14 @@
        diff -wurp -N orig ffmpeg
        diff -wurp -N orig ffmpeg >patches/to_upstream/48_vorbis_residue_buffer.patch
 
+       rm -rf orig
+       cp -R ffmpeg orig
+       cd ffmpeg
+       patch -p1 --no-backup-if-mismatch < ../patches/to_upstream/48_vorbis_residue_buffer.patch
+       cd ..
+       diff -wurp -N orig ffmpeg
+       diff -wurp -N orig ffmpeg >patches/to_upstream/49_vorbis_buffer_defense.patch
+
 Testing
   Updates should be tested against
   a) http://wiki.xiph.org/TheoraTestsuite