[Bug 750096] New: sdp: prevent the sdp message parser from reading past the end of the buffer

GStreamer (GNOME Bugzilla) bugzilla at gnome.org
Fri May 29 04:20:56 PDT 2015


https://bugzilla.gnome.org/show_bug.cgi?id=750096

            Bug ID: 750096
           Summary: sdp: prevent the sdp message parser from reading past
                    the end of the buffer
    Classification: Platform
           Product: GStreamer
           Version: git master
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gst-plugins-base
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: george.kiagiadakis at collabora.com
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Created attachment 304237
  --> https://bugzilla.gnome.org/attachment.cgi?id=304237&action=edit
patch

gst_sdp_message_parse_buffer() currently has a size argument but it doesn't use
it, making it possible for a malformed SDP message to cause a crash or even
maliciously gather data located out of the allocated buffer for the SDP
message.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list