gstrtspconnection: Security loophole making heap overflow
The former code allowed an attacker to create a heap overflow by sending a longer than allowed session id in a response and including a semicolon to change the maximum length. With this change, the parser will never go beyond 512 bytes.
parent
2e939afd
Loading
Loading
Pipeline
#23997
failed
with stages
in
2 hours, 20 minutes, and 10 seconds
Loading
Please register or sign in to comment