[Bug 668320] New: RTCP receiver reports reveal full user name

GStreamer (bugzilla.gnome.org) bugzilla at gnome.org
Fri Jan 20 01:22:54 PST 2012


https://bugzilla.gnome.org/show_bug.cgi?id=668320
  GStreamer | gstreamer (core) | 0.10.35

           Summary: RTCP receiver reports reveal full user name
    Classification: Platform
           Product: GStreamer
           Version: 0.10.35
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: Normal
         Component: gstreamer (core)
        AssignedTo: gstreamer-bugs at lists.freedesktop.org
        ReportedBy: 995f3df8db9c at 7ebdcfd3fe2d.anonbox.net
         QAContact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---


When watching RTSP video streams with gstreamer, the user name (linux username
as well as the real name!) is included in the RTCP receiver reports that are
sent back to the streaming server in the CNAME (user and domain) and NAME (full
user name) of the SDES per default.

This doesn't seem like a very safe default setting and should be at most
optional. The SSRC is already unique, and there are plenty other options to
distinguish the user in question. (e.g. use the numeric UID and no real name).

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list