kenmirrors
/
freeswitch
mirror of https://github.com/signalwire/freeswitch.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

FS-11751: process_rtcp_packet() bounds check

This commit is contained in:
Dragos Oancea 2019-04-02 20:10:22 +00:00
parent 0a02a33023
commit 32de076b18
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/switch_rtp.c
View File

@ -6848,6 +6848,9 @@ static switch_status_t process_rtcp_packet(switch_rtp_t *rtp_session, switch_siz
switch_status_t status = SWITCH_STATUS_FALSE; switch_status_t status = SWITCH_STATUS_FALSE;
rtcp_msg_t *msg = rtp_session->rtcp_recv_msg_p; rtcp_msg_t *msg = rtp_session->rtcp_recv_msg_p;
if (remain < sizeof(switch_rtcp_ext_hdr_t) || remain > sizeof(rtcp_msg_t)) {
return status;
}
if (msg->header.version != 2) { if (msg->header.version != 2) {
if (msg->header.version == 0) { if (msg->header.version == 0) {
if (rtp_session->ice.ice_user) { if (rtp_session->ice.ice_user) {