id,summary,reporter,owner,description,type,status,priority,component,version,resolution,keywords,cc,blockedby,blocking,reproduced,analyzed
2292,Crash: Buffer overflow in rtmp_open() [libavformat/rtmpproto.c],marcel123,,"I have been working with RTMP streaming to YouTube. The URLs that YouTube generates when creating their ""Live Events"" are very long. I was getting a heap corruption which I tracked down to the following:

In rtmpproto.c

#define APP_MAX_LENGTH 128

YouTube generates URLs where the app portion of the URL is usually longer than 128 bytes. The code in rtmp_open() only allocates APP_MAX_LENGTH bytes and does not check for an overflow. As a result, the long YouTube RTMP URL is causing a heap corruption.

I verified that allocating the appropriate size buffer does fix the problem I was seeing.

",defect,closed,important,avformat,git-master,fixed,RTMP,msamek@…,,,0,0