mirror of
https://gitlab.freedesktop.org/gstreamer/gstreamer.git
synced 2024-11-25 03:01:03 +00:00
ac72a6adaa
We validate the header extensions length of an RTP buffer by comparing it against the block size. Since we multiply the length in words by 4 to get the length in bytes, a suitably large length could cause a wrapround of the uint16, giving a lower length which erroneously passes the check and allows the buffer to be mapped. Part-of: <https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/-/merge_requests/864> |
||
---|---|---|
.. | ||
allocators | ||
app | ||
audio | ||
fft | ||
gl | ||
pbutils | ||
riff | ||
rtp | ||
rtsp | ||
sdp | ||
tag | ||
video | ||
gettext.h | ||
glib-compat-private.h | ||
gst-i18n-app.h | ||
gst-i18n-plugin.h | ||
meson.build |