You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-15 14:13:16 +02:00
rtpdec: Limit writing to the buffer size
This fixes potential buffer overwrites. Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
@@ -531,7 +531,7 @@ static int rtp_parse_packet_internal(RTPDemuxContext *s, AVPacket *pkt,
|
||||
if (ret < 0)
|
||||
return AVERROR(EAGAIN);
|
||||
if (ret < len) {
|
||||
s->read_buf_size = len - ret;
|
||||
s->read_buf_size = FFMIN(len - ret, sizeof(s->buf));
|
||||
memcpy(s->buf, buf + ret, s->read_buf_size);
|
||||
s->read_buf_index = 0;
|
||||
return 1;
|
||||
|
Reference in New Issue
Block a user