[Bug 737591] rtpgstdepay: buffer overread

[GStreamer (bugzilla.gnome.org)]

https://bugzilla.gnome.org/show_bug.cgi?id=737591
  GStreamer | gst-plugins-good | git

--- Comment #7 from Wim Taymans <wim.taymans at gmail.com> 2014-11-20 12:18:12 UTC ---
A little better but still dangerous because core will read past the 0-byte when
\ is the last char of the string.

commit 3d7b0f30d748ad1c8e2c5d3528bfbdfe21cfde60
Author: Wim Taymans <wtaymans at redhat.com>
Date:   Thu Nov 20 13:14:14 2014 +0100

    rtpgstpay: put 0-byte at the end of events

    Put a 0-byte at the end of the event string. Does not break ABI because
    old depayloaders will skip the 0 byte (which is included in the length).
    Expect a 0-byte at the end of the event string or a ; for old
    payloaders.

    See https://bugzilla.gnome.org/show_bug.cgi?id=737591

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.