[Bug 737591] rtpgstdepay: buffer overread

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=737591
  GStreamer | gst-plugins-good | git

Wim Taymans <wim.taymans> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |wim.taymans at gmail.com

--- Comment #6 from Wim Taymans <wim.taymans at gmail.com> 2014-11-20 11:48:00 UTC ---
I think this is the best patch, check if the delimiter is where it is expected
and refuse all other input. For the caps caps with the 0-terminator, this is ok
but I'm unsure if it's possible to escape the ; somewhere in a valid event..

commit 9d2902d978905acf3ecc88dd331b20072dc9eab0
Author: Wim Taymans <wtaymans at redhat.com>
Date:   Thu Nov 20 12:40:28 2014 +0100

    rtpgstdepay: avoid buffer overread.

    Check that a caps event string is 0 terminated and the event string is
    terminated with a ; to avoid buffer overreads.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.