From 8fb9da2fd9477c0d534d679d4cd93c8f802a1072 Mon Sep 17 00:00:00 2001 From: Sean Bright Date: Fri, 11 Dec 2020 15:49:48 -0500 Subject: [PATCH] res_rtp_asterisk.c: Fix signed mismatch that leads to overflow ASTERISK-29205 #close Change-Id: Ib7aa65644e8df76e2378d7613ee7cf751b9d0bea --- res/res_rtp_asterisk.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/res/res_rtp_asterisk.c b/res/res_rtp_asterisk.c index 1820ab100e..2ed18318f0 100644 --- a/res/res_rtp_asterisk.c +++ b/res/res_rtp_asterisk.c @@ -6871,7 +6871,7 @@ static int rtp_transport_wide_cc_feedback_produce(const void *data) /* If there is no more room left for storing packets stop now, we leave 20 * extra bits at the end just in case. */ - if ((sizeof(bdata) - (packet_len + delta_len + 20)) < 0) { + if (packet_len + delta_len + 20 > sizeof(bdata)) { res = -1; break; } @@ -6905,7 +6905,7 @@ static int rtp_transport_wide_cc_feedback_produce(const void *data) previous_packet = statistics; /* If there is no more room left in the packet stop handling of any subsequent packets */ - if ((sizeof(bdata) - (packet_len + delta_len + 20)) < 0) { + if (packet_len + delta_len + 20 > sizeof(bdata)) { break; } } -- 2.47.2