Alexander E. Patrakov 26b9d22dd2 rtp-recv: fix crash on empty UDP packets (CVE-2014-3970) ... On FIONREAD returning 0 bytes, we cannot return success, as the caller (rtpoll_work_cb in module-rtp-recv.c) would then try to pa_memblock_unref(chunk.memblock) and, because memblock is NULL, trigger an assertion. Also we have to read out the possible empty packet from the socket, so that the kernel doesn't tell us again and again about it. Signed-off-by: Alexander E. Patrakov <patrakov@gmail.com>		2014-06-06 14:41:22 +03:00
..
headerlist.c	Use pa_hashmap_remove_and_free() where appropriate	2014-04-17 10:06:23 +03:00
headerlist.h	Remove $Id$ lines left over from SVN	2008-10-08 20:36:24 +01:00
module-rtp-recv.c	Use pa_hashmap_remove_and_free() where appropriate	2014-04-17 10:06:23 +03:00
module-rtp-send.c	rtp-send: Add "inhibit_auto_suspend" module argument	2014-02-28 15:54:06 +02:00
rfc2327.txt	add an RTP sender module	2006-04-14 23:47:33 +00:00
rfc2974.txt	add an RTP sender module	2006-04-14 23:47:33 +00:00
rfc3550.txt	add an RTP sender module	2006-04-14 23:47:33 +00:00
rfc3551.txt	add an RTP sender module	2006-04-14 23:47:33 +00:00
rtp.c	rtp-recv: fix crash on empty UDP packets (CVE-2014-3970)	2014-06-06 14:41:22 +03:00
rtp.h	virtual-sink: Fix a crash when moving the sink to a new master right after setup.	2011-02-26 10:40:06 +00:00
rtsp_client.c	Remove pa_bool_t and replace it with bool.	2013-07-04 12:25:30 +03:00
rtsp_client.h	Remove unnecessary #includes	2011-06-22 23:12:20 +01:00
sap.c	Remove pa_bool_t and replace it with bool.	2013-07-04 12:25:30 +03:00
sap.h	Remove pa_bool_t and replace it with bool.	2013-07-04 12:25:30 +03:00
sdp.c	Remove pa_bool_t and replace it with bool.	2013-07-04 12:25:30 +03:00
sdp.h	Use LGPL 2.1 on all files previously using LGPL 2	2009-03-03 20:23:02 +00:00