From: John Brooks <john.brooks@bluecherry.net>
Date: Wed, 12 Oct 2011 08:06:26 +0000 (+0300)
Subject: rtpdec: Fix the minimum packet length for RTCP SR packets
X-Git-Tag: v0.8b1~1174
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5d6ecf5345c0913e2b66427ea062e7989201a139;p=platform%2Fupstream%2Flibav.git

rtpdec: Fix the minimum packet length for RTCP SR packets

We actually read 20 bytes of these packets.

Signed-off-by: Martin Storsjö <martin@martin.st>
---

diff --git a/libavformat/rtpdec.c b/libavformat/rtpdec.c
index 3712260..07f4cc3 100644
--- a/libavformat/rtpdec.c
+++ b/libavformat/rtpdec.c
@@ -115,7 +115,7 @@ static int rtcp_parse_packet(RTPDemuxContext *s, const unsigned char *buf, int l
     while (len >= 2) {
         switch (buf[1]) {
         case RTCP_SR:
-            if (len < 16) {
+            if (len < 20) {
                 av_log(NULL, AV_LOG_ERROR, "Invalid length for RTCP SR packet\n");
                 return AVERROR_INVALIDDATA;
             }