Changeset 3498 for pjproject/branches/projects/2.0-dev/pjmedia/src/pjmedia/stream_common.c

Timestamp:

Apr 6, 2011 7:01:55 AM (13 years ago)

Author:

bennylp

Message:

Re #1186: fixed crash when parsing fmtp with more than 8 parameters by enlarging the default limit, fix the crash, and make the limit configurable

File:

• pjproject/branches/projects/2.0-dev/pjmedia/src/pjmedia/stream_common.c (modified) (2 diffs)

pjproject/branches/projects/2.0-dev/pjmedia/src/pjmedia/stream_common.c

@@ -18 +18 @@
  */
 #include <pjmedia/stream_common.h>
+#include <pj/log.h>
+
+#define THIS_FILE       "stream_common.c"
 
 /*
@@ -56 +59 @@
     while (p < p_end) {
         char *token, *start, *end;
+
+        if (fmtp->cnt >= PJMEDIA_CODEC_MAX_FMTP_CNT) {
+            PJ_LOG(4,(THIS_FILE,
+                      "Warning: fmtp parameter count exceeds "
+                      "PJMEDIA_CODEC_MAX_FMTP_CNT"));
+            return PJ_SUCCESS;
+        }
 
         /* Skip whitespaces */