commit | 43e62fcc766bc81fdf9004519597d2fa86015a00 | [log] [tgz] |
---|---|---|
author | Markus Handell <handellm@webrtc.org> | Tue Jan 07 18:46:15 2020 |
committer | Commit Bot <commit-bot@chromium.org> | Tue Jan 07 23:29:55 2020 |
tree | 8a63a8fd28f41eb2dcbe67ec0565a4f7a0e281f2 | |
parent | 2e6ca11bd1596f0e749a0cde3552200478bca95d [diff] |
Fix Heap-use-after-free. This change fixes a problem where VideoRtpReceiver::OnGenerateKeyFrame would use it's stored media_channel_ pointer after the channel was deleted. This was due to the higher layer RtpTransceiver not clearing the reference with SetMediaChannel(nullptr) when removing the receiver, and the VideoRtpReceiver's embedded VideoRtpTrackSource subsequently requesting a key frame. Bug: chromium:1037703 Change-Id: Iee8338458063866589b70b4070793fbe600d41ff Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/164538 Reviewed-by: Florent Castelli <orphis@webrtc.org> Reviewed-by: Steve Anton <steveanton@webrtc.org> Commit-Queue: Markus Handell <handellm@webrtc.org> Cr-Commit-Position: refs/heads/master@{#30175}
WebRTC is a free, open software project that provides browsers and mobile applications with Real-Time Communications (RTC) capabilities via simple APIs. The WebRTC components have been optimized to best serve this purpose.
Our mission: To enable rich, high-quality RTC applications to be developed for the browser, mobile platforms, and IoT devices, and allow them all to communicate via a common set of protocols.
The WebRTC initiative is a project supported by Google, Mozilla and Opera, amongst others.
See http://www.webrtc.org/native-code/development for instructions on how to get started developing with the native code.
Authoritative list of directories that contain the native API header files.