From d398d042c1b141277b81a24ba800db2832c5fe9c Mon Sep 17 00:00:00 2001 From: John Brooks Date: Wed, 12 Oct 2011 11:06:26 +0300 Subject: [PATCH] rtpdec: Fix the minimum packet length for RTCP SR packets MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit We actually read 20 bytes of these packets. Signed-off-by: Martin Storsjö (cherry picked from commit 5d6ecf5345c0913e2b66427ea062e7989201a139) Signed-off-by: Michael Niedermayer --- libavformat/rtpdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/rtpdec.c b/libavformat/rtpdec.c index 9fc30d7b66..bc0aea6100 100644 --- a/libavformat/rtpdec.c +++ b/libavformat/rtpdec.c @@ -114,7 +114,7 @@ static int rtcp_parse_packet(RTPDemuxContext *s, const unsigned char *buf, int l while (len >= 2) { switch (buf[1]) { case RTCP_SR: - if (len < 16) { + if (len < 20) { av_log(NULL, AV_LOG_ERROR, "Invalid length for RTCP SR packet\n"); return AVERROR_INVALIDDATA; }