Decompressor crash because of lossy RTP stream with SN wraparound
Bug #1093836 reported by
Didier Barvaux
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | ||
|---|---|---|---|---|---|---|
| rohc | Status tracked in Rohc-main | |||||
| 1.3.x |
Won't Fix
|
High
|
Didier Barvaux | |||
| 1.4.x |
Won't Fix
|
High
|
Didier Barvaux | |||
| Rohc-1.5.x |
Won't Fix
|
High
|
Didier Barvaux | |||
| Rohc-main |
Fix Released
|
High
|
Didier Barvaux | |||
Bug Description
When decompressing one RTP stream with SN wraparound but several lost packets (more lost packets than the width of the W-LSB window), the decoded SN is greater than 0xFFFF. This is not expected for RTP streams because SN is 16-bit long max. So, the library asserts when decoding RTP TS.
The solution is to truncate the SN values to 0xFFFF max before using them.
The attached stream causes the bug to happen if the #102 - #105 packets are lost.
Revision history for this message
| Didier Barvaux (didier-barvaux) wrote | #1 |
Revision history for this message
| Didier Barvaux (didier-barvaux) wrote | #2 |
Revision history for this message
| Didier Barvaux (didier-barvaux) wrote | #3 |
To post a comment you must log in.
Fixed in the main branch. See http://