Re: [Live-devel] [PATCH] overflow in getResponse1()

2010-02-09 Thread Ross Finlayson
Thanks. I have just released a new version (2010.02.10) of the software, that includes this fix. -- Ross Finlayson Live Networks, Inc. http://www.live555.com/ ___ live-devel mailing list live-devel@lists.live555.com http://lists.live555.com/mailman/li

[Live-devel] [PATCH] overflow in getResponse1()

2010-02-09 Thread Martin Bonnin
Hello all, getResponse1() can overflow by one byte when called from setupMediaSubsession(). The reason is that the 'responseBufferSize' does not include the ending '\0' (see responseBuffer[bytesRead] = '\0' in RTSPClient.cpp around line 2195) The attached patch allocates one byte more, l