neels has uploaded this change for review.

View Change

osmo_rtp_get_payload(): fix bounds check for padding

If we want to read a padding length octet from the end, payload_len must
be >= 1.

Change-Id: I071ad2f799bb4cfecf349c5a25bf7a46da6128dc
---
M src/rtp.c
1 file changed, 1 insertion(+), 1 deletion(-)

git pull ssh://gerrit.osmocom.org:29418/libosmo-netif refs/changes/71/38071/1

diff --git a/src/rtp.c b/src/rtp.c
index f4b0ada..77905f2 100644
--- a/src/rtp.c
+++ b/src/rtp.c
@@ -140,7 +140,7 @@
 		}
 	}
 	if (rtph->padding) {
-		if (payload_len < 0) {
+		if (payload_len < 1) {
 			DEBUGPC(DLMUX, "received RTP frame too short for "
 				"padding length\n");
 			return NULL;

To view, visit change 38071. To unsubscribe, or for help writing mail filters, visit settings.