decompressor: zero-length packet causes a crash
Bug #1087682 reported by
Didier Barvaux
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
rohc | Status tracked in Rohc-main | |||||
1.3.x |
Fix Released
|
Critical
|
Didier Barvaux | |||
1.4.x |
Fix Released
|
Critical
|
Didier Barvaux | |||
Rohc-1.5.x |
Fix Released
|
Critical
|
Didier Barvaux | |||
Rohc-main |
Fix Released
|
Critical
|
Didier Barvaux |
Bug Description
Decompressing a zero-length ROHC packet makes the ROHC library crash.
To post a comment you must log in.
Fixed in main branch: sanitize inputs of the rohc_decompress() function.
See http:// bazaar. launchpad. net/~didier- barvaux/ rohc/main/ revision/ 615