mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2026-04-29 06:46:38 -04:00
Input Validation: Medium atoi() on network-received data returns 0 on parse failure, which is indistinguishable from a valid "0" input. It also accepts negative values and does not detect overflow. Replace with strtol() and validate that the status code is in the valid HTTP/RTSP range (100-599) to prevent protocol state confusion from malformed responses. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| base64.h | ||
| rtsp-client.c | ||
| rtsp-client.h | ||