diff options
author | Alexander E. Patrakov <patrakov@gmail.com> | 2014-06-05 22:29:25 +0600 |
---|---|---|
committer | Wim Taymans <wtaymans@redhat.com> | 2014-06-06 15:00:57 +0200 |
commit | 3eebd8e912904969be3faf2624cf15cde306a37c (patch) | |
tree | 921351e75eb01a4ed647406b51e6ea1383dd1a5d /autogen.sh | |
parent | ce095f347ce161336f6a79d00bed3edcef5f7ed7 (diff) |
rtp-recv: fix crash on empty UDP packets (CVE-2014-3970)rawhide
On FIONREAD returning 0 bytes, we cannot return success, as the caller
(rtpoll_work_cb in module-rtp-recv.c) would then try to
pa_memblock_unref(chunk.memblock) and, because memblock is NULL, trigger
an assertion.
Also we have to read out the possible empty packet from the socket, so
that the kernel doesn't tell us again and again about it.
Signed-off-by: Alexander E. Patrakov <patrakov@gmail.com>
Diffstat (limited to 'autogen.sh')
0 files changed, 0 insertions, 0 deletions