File tracker-miners-CVE-2026-1764.patch of Package tracker-miners

diff -urp tracker-miners-3.6.2.orig/src/tracker-extract/tracker-extract-mp3.c tracker-miners-3.6.2/src/tracker-extract/tracker-extract-mp3.c
--- tracker-miners-3.6.2.orig/src/tracker-extract/tracker-extract-mp3.c	2023-10-31 06:35:32.000000000 -0500
+++ tracker-miners-3.6.2/src/tracker-extract/tracker-extract-mp3.c	2026-02-05 14:18:50.890800100 -0600
@@ -1438,6 +1438,10 @@ extract_performers_tags (id3v2tag *tag,
 		text_instrument = &data[pos];
 		text_instrument_len = id3v2_strlen (text_encode, text_instrument, csize - 1);
 		offset = text_instrument_len + id3v2_nul_size (text_encode);
+
+		if (pos + offset >= csize)
+			break;
+
 		text_performer = &data[pos + offset];
 
 		if (version == 2.4f) {
openSUSE Build Service is sponsored by