Viewing all changes in revision 224.
- Committer: Didier Barvaux
- Date: 2013-05-19 19:09:06 UTC
- Revision ID: didier@barvaux.org-20130519190906-ndehaev2a6wx136d
Fix bug #1181829: decompressor crash with truncated UOR-2 packets of the RTP profile
https://bugs.launchpad.net/rohc/+bug/1181829
The UOR-2 packets of the RTP profile got an additional 1-byte field wrt the
non-RTP UOR-2 packet. The minimal length of the UOR-2 packets is checked, but
the additional byte was not taken into account. So a truncated UOR-2 packet
was able to crash or assert the decompressor.
https://bugs.launchpad.net/rohc/+bug/1181829
The UOR-2 packets of the RTP profile got an additional 1-byte field wrt the
non-RTP UOR-2 packet. The minimal length of the UOR-2 packets is checked, but
the additional byte was not taken into account. So a truncated UOR-2 packet
was able to crash or assert the decompressor.
- files modified:
- src/decomp/d_generic.c
expand all
collapse all
added
removed
