From: David Vossel <dvossel@digium.com>
Date: Mon, 30 Nov 2009 17:35:48 +0000 (+0000)
Subject: fixes crash caused by RTP comfort noise payload greater than 24 bytes
X-Git-Tag: 1.2.38~2^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d45abc9ef428f773346a5ae49b0afd92210f6f8c;p=thirdparty%2Fasterisk.git

fixes crash caused by RTP comfort noise payload greater than 24 bytes

AST-2009-010

(closes issue #16242)
Reported by: amorsen
Patches:
      issue16242.diff uploaded by oej (license 306)
Tested by: amorsen, oej, dvossel


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.2@231518 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/rtp.c b/rtp.c
index f0430b5111..45c4464538 100644
--- a/rtp.c
+++ b/rtp.c
@@ -348,7 +348,6 @@ static struct ast_frame *process_rfc3389(struct ast_rtp *rtp, unsigned char *dat
 	}
 	rtp->f.frametype = AST_FRAME_CNG;
 	rtp->f.subclass = data[0] & 0x7f;
-	rtp->f.datalen = len - 1;
 	rtp->f.samples = 0;
 	rtp->f.delivery.tv_usec = rtp->f.delivery.tv_sec = 0;
 	f = &rtp->f;