tree a94b65bb3ce6cb4f8c2552e9b41e8adf63617c1f
parent 384ff7d0268c71e76f7328a9ca6dfe96e4a3ab23
author Tobias Ronge <tobiasr@axis.com> 1552554747 +0100
committer Jonas Larsson <ljonas@google.com> 1605645352 -0800

gstrtspconnection: Security loophole making heap overflow

The former code allowed an attacker to create a heap overflow by
sending a longer than allowed session id in a response and including a
semicolon to change the maximum length. With this change, the parser
will never go beyond 512 bytes.