diff options
author | Benny Prijono <bennylp@teluu.com> | 2008-05-28 16:16:26 +0000 |
---|---|---|
committer | Benny Prijono <bennylp@teluu.com> | 2008-05-28 16:16:26 +0000 |
commit | 2ac219d1142aaa235ae786d1eac8b4a9383170e3 (patch) | |
tree | 3969c2d5f1bdd5d5db8d5e654f245fb585415177 /pjmedia | |
parent | 1b99a13cb46e34a2dc5a52b60f9901308e868a97 (diff) |
Fixed bug in pjmedia_sdp_rtpmap_to_attr(): may overwrite past the buffer
git-svn-id: http://svn.pjsip.org/repos/pjproject/trunk@1967 74dad513-b988-da41-8d7b-12977e46ad98
Diffstat (limited to 'pjmedia')
-rw-r--r-- | pjmedia/src/pjmedia/sdp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pjmedia/src/pjmedia/sdp.c b/pjmedia/src/pjmedia/sdp.c index a3f436f4..91c4ce1e 100644 --- a/pjmedia/src/pjmedia/sdp.c +++ b/pjmedia/src/pjmedia/sdp.c @@ -466,7 +466,7 @@ PJ_DEF(pj_status_t) pjmedia_sdp_rtpmap_to_attr(pj_pool_t *pool, return PJMEDIA_SDP_ERTPMAPTOOLONG; attr->value.slen = len; - attr->value.ptr = (char*) pj_pool_alloc(pool, attr->value.slen); + attr->value.ptr = (char*) pj_pool_alloc(pool, attr->value.slen+1); pj_memcpy(attr->value.ptr, tempbuf, attr->value.slen+1); *p_attr = attr; |