1 result · Feed
-
Unscored —
`WaveFormat::parse` reads past the end of a `&WAVEFORMATEX`
`WaveFormat::parse` is a safe function that takes a `&WAVEFORMATEX`, which is only valid for reads of `size_of::<WAVEFORMATEX>()` (18) bytes. When the header has `wFormatTag == WAVE_FORMAT_EXTENSIBLE` and `cbSize >= 22`, the function reinterprets the referenc…