Re: [Live-devel] Heap Use-After-Free Bug in live555 (2024-10-10)

2024-10-10 Thread Ross Finlayson
You're doing a great job; the implementation of RTP-over-TCP streaming is probably the most complex and error-prone part of the code. I've just installed a new version (2024.10.11) of the code that fixes this latest problem. Ross Finlayson Live Networks, Inc. http://www.live555.com/

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-20 Thread Ross Finlayson
> On Oct 20, 2021, at 2:17 PM, 潘雁 wrote: > > The live555 is compiled with clang. If it is compiled with gcc, the crash > will not happen. Thank you. This was important information. I was able to reproduce the problem, and have released a new version (2021.10.20) of the “LIVE555 Streaming M

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-19 Thread 潘雁
To ensure the correctness of the version, I modified the dockerfile, "wget http://www.live555.com/liveMedia/public/live555-latest.tar.gz", and the heap-use-after-free bug did exsit. Meanwhile, I compared it with the previous CVE lists, and it is not include.

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-19 Thread Ross Finlayson
> On Oct 19, 2021, at 5:43 PM, Ba Jinsheng wrote: > > Why the dockerfile is exactly what I wrote before? > What happened? I see, from your docker file, that you are using the latest version (2021.08.24) of the LIVE555 code. I don’t use docker (because it’s not supported on my system), but

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-19 Thread 潘雁
gards,Jinsheng Ba-Original Message-From: live-devel On Behalf Of Ross FinlaysonSent: Wednesday, October 20, 2021 8:23 AMTo: LIVE555 Streaming Media - development & use Subject: Re: [Live-devel] heap-use-after-free bug in live555- External Email -Thank you for the report.Unfortunat

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-19 Thread Ba Jinsheng
Why the dockerfile is exactly what I wrote before? What happened? Best regards, Jinsheng Ba -Original Message- From: live-devel On Behalf Of Ross Finlayson Sent: Wednesday, October 20, 2021 8:23 AM To: LIVE555 Streaming Media - development & use Subject: Re: [Live-devel] heap

Re: [Live-devel] heap-use-after-free bug in live555

2021-10-19 Thread Ross Finlayson
Thank you for the report. Unfortunately I was not able to reproduce this with the latest version of our software. Are you sure that you’re using the latest version of the LIVE555 software; see http://live555.com/liveMedia/faq.html#latest-version ? A bug similar to this was fixed in August of