[FFmpeg-devel] Fix NTP time in RTCP SR packets
Mon Feb 18 13:48:22 CET 2008
Luca Abeni wrote:
> Hi Michael,
> Michael Niedermayer wrote:
>>> Uh, as I understand it, this sends out the local time with usec
>>> precision. The server sure as hell does not know that, and it could e.g.
>>> be used to guess values if someone uses a stupid random number
>>> generator, system/network load and other things.
>>> IOW this is one of the things everyone planning a side-channel attack
>>> just dreams of.
>> Use time/1000*1000 and you loose less information.
> If this is ok from the security point of view, I think this is the best
> solution... I'll send a patch later
And here is the patch...
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
More information about the ffmpeg-devel