[sr-dev] [tracker] Comment added: crash in parser/sdp/sdp_helpr_funcs.c

[sip-router]

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#435 - crash in parser/sdp/sdp_helpr_funcs.c
User who did this - Ovidiu Sas (osas)

----------
The INVITE is malformed.
Content-Length:   416
v=0\r\no=- 3610278376 3610278376 IN IP4 64.200.200.20\r\ns=pjmedia\r\nb=AS:84\r\nt=0 0\r\na=X-nat:0\r\nm=audio 64400 RTP/AVP 8 0 9 103 102 104 101\r\nc=IN IP4 64.200.200.20\r\nb=TIAS:64000\r\na=rtcp:64401 IN IP4 64.200.200.20\r\na=sendrecv\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:9 G700\r\na=rtpmap:103 speex/16000\r\na=rtpmap:102 speex/8000\r\na=rtpmap:104 speex/32000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-15\r\n-15\r\n

The Content-Length header is not matching the actual SDP length and at the end of SDP there is a bogus extra line:
a=fmtp:101 0-15\r\n-15\r\n

Looks like the SDP was tempered with in a bad way.
----------

More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=435#comment1483

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.