pespin submitted this change.

View Change

Approvals: fixeria: Looks good to me, but someone else must approve Jenkins Builder: Verified laforge: Looks good to me, approved pespin: Looks good to me, approved
osmo_rtp_get_payload(): fix bounds check for padding

If we want to read a padding length octet from the end, payload_len must
be >= 1.

Change-Id: I071ad2f799bb4cfecf349c5a25bf7a46da6128dc
---
M src/rtp.c
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rtp.c b/src/rtp.c
index f4b0ada..77905f2 100644
--- a/src/rtp.c
+++ b/src/rtp.c
@@ -140,7 +140,7 @@
}
}
if (rtph->padding) {
- if (payload_len < 0) {
+ if (payload_len < 1) {
DEBUGPC(DLMUX, "received RTP frame too short for "
"padding length\n");
return NULL;

To view, visit change 38071. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-MessageType: merged
Gerrit-Project: libosmo-netif
Gerrit-Branch: master
Gerrit-Change-Id: I071ad2f799bb4cfecf349c5a25bf7a46da6128dc
Gerrit-Change-Number: 38071
Gerrit-PatchSet: 1
Gerrit-Owner: neels <nhofmeyr@sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-Reviewer: fixeria <vyanitskiy@sysmocom.de>
Gerrit-Reviewer: laforge <laforge@osmocom.org>
Gerrit-Reviewer: pespin <pespin@sysmocom.de>