| --- libid3tag-0.15.1b/utf16.c |
| +++ libid3tag-0.15.1b/utf16.c |
| @@ -282,5 +282,18 @@ |
| |
| free(utf16); |
| |
| + if (end == *ptr && length % 2 != 0) |
| + { |
| + /* We were called with a bogus length. It should always |
| + * be an even number. We can deal with this in a few ways: |
| + * - Always give an error. |
| + * - Try and parse as much as we can and |
| + * - return an error if we're called again when we |
| + * already tried to parse everything we can. |
| + * - tell that we parsed it, which is what we do here. |
| + */ |
| + (*ptr)++; |
| + } |
| + |
| return ucs4; |
| } |
