--- libavformat/rtmpproto.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/libavformat/rtmpproto.c b/libavformat/rtmpproto.c index a2efe38..a32c4a9 100644 --- a/libavformat/rtmpproto.c +++ b/libavformat/rtmpproto.c @@ -915,6 +915,12 @@ static int handle_ping(URLContext *s, RTMPPacket *pkt) t = AV_RB16(pkt->data); if (t == 6) { + if (pkt->data_size < 6) { + av_log(s, AV_LOG_ERROR, "Too short ping packet (%d)\n", + pkt->data_size); + return AVERROR_INVALIDDATA; + } + if ((ret = gen_pong(s, rt, pkt)) < 0) return ret; } -- 1.7.11.1
_______________________________________________ libav-devel mailing list libav-devel@libav.org https://lists.libav.org/mailman/listinfo/libav-devel