chore(mp3info): apply upstream patch for parsing on short frames

Signed-off-by: grnd-alt <github@belakkaf.net>
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

Author: grnd-alt

.patches/mp3info-break-frame-parsing.patch

@@ -0,0 +1,26 @@
+From 186b99ac4a57d091e9414c0944524a9e098835f3 Mon Sep 17 00:00:00 2001
+From: grnd-alt <github@belakkaf.net>
+Date: Mon, 13 Oct 2025 12:18:37 +0200
+Subject: [PATCH] fix: break frame parsing on short frame
+
+Signed-off-by: grnd-alt <github@belakkaf.net>
+---
+ src/Mp3Info.php | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/src/Mp3Info.php b/src/Mp3Info.php
+index ccf97f4..24781d7 100644
+--- a/src/Mp3Info.php
++++ b/src/Mp3Info.php
+@@ -584,6 +584,11 @@ protected function parseId3v23Body($fp, $lastByte) {
+             $raw = fread($fp, 10);
+             $frame_id = substr($raw, 0, 4);
+ 
++            if (strlen($raw) < 10) {
++                fseek($fp, $lastByte);
++                break;
++            }
++
+             if ($frame_id == str_repeat(chr(0), 4)) {
+                 fseek($fp, $lastByte);
+                 break;

composer.patches.json

@@ -1,3 +1,7 @@
 {
-	"patches": {}
+	"patches": {
+		"wapmorgan/mp3info": {
+			"Break frame parsing on invalid frame": ".patches/mp3info-break-frame-parsing.patch"
+		}
+	}
 }

composer/installed.json

@@ -6190,6 +6190,11 @@
                 "bin/mp3scan"
             ],
             "type": "library",
+            "extra": {
+                "patches_applied": {
+                    "Break frame parsing on invalid frame": ".patches/mp3info-break-frame-parsing.patch"
+                }
+            },
             "installation-source": "dist",
             "autoload": {
                 "psr-4": {

wapmorgan/mp3info/PATCHES.txt

@@ -0,0 +1,7 @@
+This file was automatically generated by Composer Patches (https://github.com/cweagans/composer-patches)
+Patches applied to this directory:
+
+Break frame parsing on invalid frame
+Source: .patches/mp3info-break-frame-parsing.patch
+
+

wapmorgan/mp3info/src/Mp3Info.php

@@ -585,6 +585,11 @@ protected function parseId3v23Body($fp, $lastByte) {
             $raw = fread($fp, 10);
             $frame_id = substr($raw, 0, 4);
 
+            if (strlen($raw) < 10) {
+                fseek($fp, $lastByte);
+                break;
+            }
+
             if ($frame_id == str_repeat(chr(0), 4)) {
                 fseek($fp, $lastByte);
                 break;