| commit | e40b437401966fe06b0c4d5430c35e4494675c90 | [log] [tgz] |
|---|---|---|
| author | Danil Chapovalov <danilchap@webrtc.org> | Mon Jul 02 09:03:06 2018 |
| committer | Commit Bot <commit-bot@chromium.org> | Tue Jul 03 10:28:05 2018 |
| tree | 102a53c512669beb7f85b5e975d0d603796594ff | |
| parent | a436bb4a994607532d6b3dde99e0d3366ab7cd3d [diff] |
Discard frame self-dependency when parsing genric frame descriptor Bug: chromium:859281 Change-Id: Ieb96f633a93f4f2e498bb1949339e239184bce9d Reviewed-on: https://webrtc-review.googlesource.com/86545 Reviewed-by: Philip Eliasson <philipel@webrtc.org> Reviewed-by: Alex Loiko <aleloi@webrtc.org> Commit-Queue: Danil Chapovalov <danilchap@webrtc.org> Cr-Commit-Position: refs/heads/master@{#23817}
diff --git a/modules/rtp_rtcp/source/rtp_generic_frame_descriptor.cc b/modules/rtp_rtcp/source/rtp_generic_frame_descriptor.cc index ab70b0d..080cac7 100644 --- a/modules/rtp_rtcp/source/rtp_generic_frame_descriptor.cc +++ b/modules/rtp_rtcp/source/rtp_generic_frame_descriptor.cc
@@ -60,6 +60,8 @@ RTC_DCHECK(FirstPacketInSubFrame()); if (num_frame_deps_ == kMaxNumFrameDependencies) return false; + if (fdiff == 0) + return false; RTC_DCHECK_LT(fdiff, 1 << 14); RTC_DCHECK_GT(fdiff, 0); frame_deps_id_diffs_[num_frame_deps_] = fdiff;
diff --git a/test/fuzzers/corpora/rtp-corpus/rtp-7 b/test/fuzzers/corpora/rtp-corpus/rtp-7 new file mode 100644 index 0000000..6c4a9fe --- /dev/null +++ b/test/fuzzers/corpora/rtp-corpus/rtp-7 Binary files differ