https://bugs.freedesktop.org/show_bug.cgi?id=92568

            Bug ID: 92568
           Summary: [module-rtp-recv] non null terminated string / non
                    portable sscanf
           Product: PulseAudio
           Version: unspecified
          Hardware: All
                OS: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: modules
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
                CC: [email protected]

Created attachment 119030
  --> https://bugs.freedesktop.org/attachment.cgi?id=119030&action=edit
patch against pa5.0

In rtp.c:

if (sscanf(t+9, "%i %64c", &_payload, c) == 2)

the string c seems to be non-null terminated. It is later used as following:

c[strcspn(c, "\n")] = 0;

The same piece of code is responsible for the inability of pulseaudio on
OpenWRT to handle RTP stream at the rate 48000 from another machine:

[pulseaudio] sdp.c: Failed to parse SDP data: missing data.

It turns out that uClibc does not agree with glibc about "%64c", see
http://git.uclibc.org/uClibc/tree/docs/Glibc_vs_uClibc_Differences.txt

Attached is a patch that should take care of both issues.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
_______________________________________________
pulseaudio-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/pulseaudio-bugs

Reply via email to