Sfoglia il codice sorgente

core: parser sdp - check length for rtpmap extract

Daniel-Constantin Mierla 11 mesi fa
parent
commit
c823f41350
1 ha cambiato i file con 3 aggiunte e 0 eliminazioni
  1. 3 0
      src/core/parser/sdp/sdp_helpr_funcs.c

+ 3 - 0
src/core/parser/sdp/sdp_helpr_funcs.c

@@ -151,6 +151,9 @@ int extract_rtpmap(str *body, str *rtpmap_payload, str *rtpmap_encoding,
 	char *cp, *cp1;
 	int len;
 
+	if(body->len <= 9) {
+		return -1;
+	}
 	if(strncasecmp(body->s, "a=rtpmap:", 9) != 0) {
 		/*LM_DBG("We are not pointing to an a=rtpmap: attribute =>`%.*s'\n",
 		 * body->len, body->s); */