commit f4220895bb355d2d608704110b80f21c29e0ffa2
author Martijn van Beurden <mvanb1@gmail.com> Sat Mar 18 11:49:59 2023 +0100
committer Martijn van Beurden <mvanb1@gmail.com> Sat Mar 18 22:55:35 2023 +0100
tree bab51ad25a2d7d320f33d505c3b24e9109e4aa64
parent 9593b949c293a45816b957581e6319c2a22a8a2e

Fix null dereference

Credit: Oss-Fuzz
Issue: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57032

src/flac/decode.c

diff --git a/src/flac/decode.c b/src/flac/decode.c
index c9c7454..89f6dbd 100644
--- a/src/flac/decode.c
+++ b/src/flac/decode.c
@@ -707,7 +707,7 @@
 	else if(format == FORMAT_AIFF)
 		iff_size = 46 + foreign_metadata_size + aligned_data_size;
 	else /* AIFF-C */
-		iff_size = 16 + foreign_metadata_size + aligned_data_size +  fm->aifc_comm_length;
+		iff_size = 16 + foreign_metadata_size + aligned_data_size + (fm?fm->aifc_comm_length:0);
 
 	if(format != FORMAT_WAVE64 && format != FORMAT_RF64 && iff_size >= 0xFFFFFFF4) {
 		flac__utils_printf(stderr, 1, "%s: ERROR: stream is too big to fit in a single %s file\n", decoder_session->inbasefilename, fmt_desc);