Changeset 5919 for pjproject


Ignore:
Timestamp:
Dec 4, 2018 2:25:52 AM (6 years ago)
Author:
ming
Message:

Fixed #2166: Possible buffer overread if RTCP packet length is invalid

File:
1 edited

Legend:

Unmodified
Added
Removed

  • pjproject/trunk/pjmedia/src/pjmedia/rtcp.c

    r5825 r5919  
    824824 
    825825        len = (pj_ntohs((pj_uint16_t)common->length)+1) * 4; 
     826        if (p + len > p_end) 
     827            break; 
     828 
    826829        switch(common->pt) { 
    827830        case RTCP_SR: 
Note: See TracChangeset for help on using the changeset viewer.