mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2026-05-10 23:50:21 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

avb: check packet sizes

Browse source 
Clamp packet len to the buffer size.

Reject packets with invalid data_len.
This commit is contained in:
Wim Taymans 2026-05-04 09:53:33 +02:00
parent 47deb75247
commit 172f969650
3 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/modules/module-avb/adp.c
View file

@ -153,8 +153,8 @@ static int adp_message(void *data, uint64_t now, const void *message, int len)
if (e == NULL)
return -errno;
memcpy(e->buf, message, len);
e->len = len;
e->len = SPA_MIN((size_t)len, sizeof(e->buf));
memcpy(e->buf, message, e->len);
e->valid_time = AVB_PACKET_ADP_GET_VALID_TIME(p);
e->entity_id = entity_id;
spa_list_append(&adp->entities, &e->link);
@ -199,7 +199,8 @@ static int adp_message(void *data, uint64_t now, const void *message, int len)
}
}
memcpy(e->buf, message, len);
e->len = SPA_MIN((size_t)len, sizeof(e->buf));
memcpy(e->buf, message, e->len);
}
}
e->last_time = now;