Skip to content

srtpdec: Fix a use-after-free buffer issue

Philippe Normand requested to merge philn/gstreamer:srtpdec-buf-uaf into main

The gst_srtp_dec_decode_buffer() function modifies the input buffer after making it writable, so the pointer might change as well, depending on the refcount of the buffer.

This issue was detected using a netsim element upstream of the decoder in a WebRTC pipeline.

Merge request reports

Loading