[pulseaudio-tickets] [Bug 92568] New: [module-rtp-recv] non null terminated string / non portable sscanf

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=92568

            Bug ID: 92568
           Summary: [module-rtp-recv] non null terminated string / non
                    portable sscanf
           Product: PulseAudio
           Version: unspecified
          Hardware: All
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: modules
          Assignee: pulseaudio-bugs at lists.freedesktop.org
          Reporter: melnikovsky at gmail.com
        QA Contact: pulseaudio-bugs at lists.freedesktop.org
                CC: lennart at poettering.net

Created attachment 119030
  --> https://bugs.freedesktop.org/attachment.cgi?id=119030&action=edit
patch against pa5.0

In rtp.c:

if (sscanf(t+9, "%i %64c", &_payload, c) == 2)

the string c seems to be non-null terminated. It is later used as following:

c[strcspn(c, "\n")] = 0;

The same piece of code is responsible for the inability of pulseaudio on
OpenWRT to handle RTP stream at the rate 48000 from another machine:

[pulseaudio] sdp.c: Failed to parse SDP data: missing data.

It turns out that uClibc does not agree with glibc about "%64c", see
http://git.uclibc.org/uClibc/tree/docs/Glibc_vs_uClibc_Differences.txt

Attached is a patch that should take care of both issues.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/pulseaudio-bugs/attachments/20151021/9f605850/attachment.html>