From 1de24ee5120b175f38fa42a6b1fbfeeb9f4a50d5 Mon Sep 17 00:00:00 2001 From: Limin Wang Date: Mon, 7 Feb 2022 18:22:02 +0800 Subject: [PATCH] avformat/udp: properly check for valid ttl in url Zhao Zhili added a ttl upper bound in commit 9daac85da8, but the check for ttl in url is missing still. Signed-off-by: Limin Wang --- libavformat/udp.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavformat/udp.c b/libavformat/udp.c index da56c8ee1d..401d9b6275 100644 --- a/libavformat/udp.c +++ b/libavformat/udp.c @@ -674,6 +674,11 @@ static int udp_open(URLContext *h, const char *uri, int flags) } if (av_find_info_tag(buf, sizeof(buf), "ttl", p)) { s->ttl = strtol(buf, NULL, 10); + if (s->ttl < 0 || s->ttl > 255) { + av_log(h, AV_LOG_ERROR, "ttl(%d) should be in range [0,255]\n", s->ttl); + ret = AVERROR(EINVAL); + goto fail; + } } if (av_find_info_tag(buf, sizeof(buf), "udplite_coverage", p)) { s->udplite_coverage = strtol(buf, NULL, 10);