Buffer overflow in sdp.c

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi developers,

It seems parse_media() will try to add as many media formats as there are on
the SDP m= line, making it quite easy to crash the app.
Potential fix attached.

Cheers,
-Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20100118/4da54631/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sdp.c.diff
Type: application/octet-stream
Size: 377 bytes
Desc: not available
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20100118/4da54631/attachment.diff>


[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux