From 3b2742e980a2b362f56d5653aafbccf78dcd9da0 Mon Sep 17 00:00:00 2001 From: Debian Multimedia Maintainers Date: Mon, 6 Mar 2023 20:09:19 -0500 Subject: [PATCH] CVE-2022-30976 commit 1773b7a34bc08734aee7d3f5dfe65d06389fe15a Author: jeanlf Date: Tue Apr 19 09:08:45 2022 +0200 fixed #2173 Gbp-Pq: Name CVE-2022-30976.patch --- src/ietf/rtp_pck_mpeg4.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/ietf/rtp_pck_mpeg4.c b/src/ietf/rtp_pck_mpeg4.c index d8bec0d..462d2c9 100644 --- a/src/ietf/rtp_pck_mpeg4.c +++ b/src/ietf/rtp_pck_mpeg4.c @@ -421,6 +421,7 @@ GF_Err gp_rtp_builder_do_avc(GP_RTPPacketizer *builder, u8 *nalu, u32 nalu_size, } if (!nalu) return GF_OK; + if (nalu_size<1) return GF_NON_COMPLIANT_BITSTREAM; /*need a new RTP packet*/ if (!builder->bytesInPacket) { @@ -559,6 +560,7 @@ GF_Err gp_rtp_builder_do_hevc(GP_RTPPacketizer *builder, u8 *nalu, u32 nalu_size } if (!nalu) return GF_OK; + if (nalu_size<2) return GF_NON_COMPLIANT_BITSTREAM; /*need a new RTP packet*/ if (!builder->bytesInPacket) { @@ -714,6 +716,7 @@ GF_Err gp_rtp_builder_do_vvc(GP_RTPPacketizer *builder, u8 *nalu, u32 nalu_size, } if (!nalu) return GF_OK; + if (nalu_size<2) return GF_NON_COMPLIANT_BITSTREAM; /*need a new RTP packet*/ if (!builder->bytesInPacket) { -- 2.30.2