Changeset 5741

Timestamp:

Feb 21, 2018 2:32:36 AM (7 years ago)

Author:

ming

Message:

Fixed #2093: Crash when parsing SDP with an invalid media format description

File:

• pjproject/trunk/pjmedia/src/pjmedia/sdp.c (modified) (1 diff)

pjproject/trunk/pjmedia/src/pjmedia/sdp.c

@@ -1530 +1530 @@
              */
             if (pj_isdigit(*m->desc.fmt[j].ptr)) {
-                unsigned pt = pj_strtoul(&m->desc.fmt[j]);
+                unsigned long pt;
+                pj_status_t status = pj_strtoul3(&m->desc.fmt[j], &pt, 10);
 
                 /* Payload type is between 0 and 127. 
                  */
-                CHECK( pt <= 127, PJMEDIA_SDP_EINPT);
+                CHECK( status == PJ_SUCCESS && pt <= 127, PJMEDIA_SDP_EINPT);
 
                 /* If port is not zero, then for each dynamic payload type, an