From c350c5643f0c328130798aa06d7da14f96936582 Mon Sep 17 00:00:00 2001
From: Ozkan Sezer <[EMAIL REDACTED]>
Date: Tue, 18 Aug 2026 20:28:40 +0300
Subject: [PATCH] timidity: reject soundfont versions >= 3
---
src/timidity/readsbk.c | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/src/timidity/readsbk.c b/src/timidity/readsbk.c
index 4e50ba29..b6a145dd 100644
--- a/src/timidity/readsbk.c
+++ b/src/timidity/readsbk.c
@@ -164,6 +164,11 @@ int load_sbk(SDL_IOStream *io, SFInfo *sf)
}
}
+ if (sf->version < 1 || sf->version > 2) {
+ SNDDBG(("Unsupported soundfont version %u.\n", sf->version));
+ return -1;
+ }
+
return 0;
}
@@ -396,6 +401,10 @@ static int process_chunk(int id, int s, SFInfo *sf, SDL_IOStream *io)
case IFIL_ID:
if (READW(&sf->version, io) < 0) return -1;
if (READW(&sf->minorversion, io) < 0) return -1;
+ if (sf->version > 2) {
+ SNDDBG(("Unsupported soundfont version %u.\n", sf->version));
+ return -1;
+ }
break;
/*
case INAM_ID: