• marcus's avatar
    Fix memory access issue in srtp_get_session_keys() · d4bd43c9
    marcus authored
    Issue:
    In srtp_get_session_keys(), when packet size (*pkt_octet_len) is
    greater than auth tag length but smaller than (auth tag length + MKI
    size), mki_start_location would take on incredible huge values,
    leading to memory access issue when calling memcmp() on iOS platform.
    
    Fix:
    Add additional sanity check before calculating mki_start_location.
    d4bd43c9
srtp.c 153 KB