decompressor: compressed list with 8-bit XI fields (PS=1) cause a crash
Bug #1087683 reported by
Didier Barvaux
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
rohc | Status tracked in Rohc-main | |||||
1.3.x |
Fix Released
|
High
|
Didier Barvaux | |||
1.4.x |
Fix Released
|
Critical
|
Didier Barvaux | |||
Rohc-1.5.x |
Fix Released
|
Critical
|
Didier Barvaux | |||
Rohc-main |
Fix Released
|
Critical
|
Didier Barvaux |
Bug Description
Decompressing a ROHC packet with a compressed list that uses 8-bit XI fields (PS=1) makes the ROHC library crash.
To post a comment you must log in.
Fixed in main branch: use the GET_REAL() macro on the PS bit extracted from the ROHC packet before using it as a 0-1 flag.
See http:// bazaar. launchpad. net/~didier- barvaux/ rohc/main/ revision/ 616