http://dxr.mozilla.org/mozilla-central/source/media/webrtc/signaling/src/media-conduit/AudioConduit.cpp#866 #1 - There is a buffer overrun of 1 char if plName is 31 chars #2 - Currently plname includes a trailing junk byte We probably just need to subtract 1: cinst.plname[plNameLength-1]='\0';
Created attachment 8440240 [details] [diff] [review] fix issues with overlong codec names in AudioConduit
Target Milestone: --- → mozilla33
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.