kenmirrors
/
freeswitch
mirror of https://github.com/signalwire/freeswitch.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

add sanity check to project size of decoded codec data 

git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@17108 d0543943-73ff-0310-b7d9-9358b9ac24b2
This commit is contained in:
Anthony Minessale 2010-03-25 21:36:11 +00:00
parent dc1ec0f3d0
commit 86141c8805
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/switch_core_codec.c
View File

@ -621,6 +621,15 @@ SWITCH_DECLARE(switch_status_t) switch_core_codec_decode(switch_codec_t *codec,
return SWITCH_STATUS_NOT_INITALIZED; return SWITCH_STATUS_NOT_INITALIZED;
} }
if (codec->implementation->encoded_bytes_per_packet) {
uint32_t frames = encoded_data_len / codec->implementation->encoded_bytes_per_packet;
if (frames && codec->implementation->decoded_bytes_per_packet * frames > *decoded_data_len) {
switch_log_printf(SWITCH_CHANNEL_LOG, SWITCH_LOG_CRIT, "Buffer size sanity check failed!\n");
return SWITCH_STATUS_GENERR;
}
}
if (codec->mutex) if (codec->mutex)
switch_mutex_lock(codec->mutex); switch_mutex_lock(codec->mutex);
status = codec->implementation->decode(codec, other_codec, encoded_data, encoded_data_len, encoded_rate, status = codec->implementation->decode(codec, other_codec, encoded_data, encoded_data_len, encoded_rate,