Commit ffdf87b1 authored by Vincent Penquerc'h's avatar Vincent Penquerc'h
Browse files

rtcpbuffer: check claimed data size against available size

Coverity 1208773
parent 9685e7a5
......@@ -352,6 +352,11 @@ read_packet_header (GstRTCPPacket * packet)
packet->item_count = 0;
packet->entry_offset = 4;
/* Ensure no overread from the claimed data size. The packet length
is expressed in multiple of 32 bits, to make things obvious. */
if (offset + 4 + packet->length * 4 > maxsize)
return FALSE;
return TRUE;
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment