summaryrefslogtreecommitdiff
path: root/pjmedia
diff options
context:
space:
mode:
authorBenny Prijono <bennylp@teluu.com>2008-05-28 16:16:26 +0000
committerBenny Prijono <bennylp@teluu.com>2008-05-28 16:16:26 +0000
commit2ac219d1142aaa235ae786d1eac8b4a9383170e3 (patch)
tree3969c2d5f1bdd5d5db8d5e654f245fb585415177 /pjmedia
parent1b99a13cb46e34a2dc5a52b60f9901308e868a97 (diff)
Fixed bug in pjmedia_sdp_rtpmap_to_attr(): may overwrite past the buffer
git-svn-id: http://svn.pjsip.org/repos/pjproject/trunk@1967 74dad513-b988-da41-8d7b-12977e46ad98
Diffstat (limited to 'pjmedia')
-rw-r--r--pjmedia/src/pjmedia/sdp.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/pjmedia/src/pjmedia/sdp.c b/pjmedia/src/pjmedia/sdp.c
index a3f436f4..91c4ce1e 100644
--- a/pjmedia/src/pjmedia/sdp.c
+++ b/pjmedia/src/pjmedia/sdp.c
@@ -466,7 +466,7 @@ PJ_DEF(pj_status_t) pjmedia_sdp_rtpmap_to_attr(pj_pool_t *pool,
return PJMEDIA_SDP_ERTPMAPTOOLONG;
attr->value.slen = len;
- attr->value.ptr = (char*) pj_pool_alloc(pool, attr->value.slen);
+ attr->value.ptr = (char*) pj_pool_alloc(pool, attr->value.slen+1);
pj_memcpy(attr->value.ptr, tempbuf, attr->value.slen+1);
*p_attr = attr;