id	summary	reporter	owner	description	type	status	priority	component	version	resolution	keywords	cc	blockedby	blocking	reproduced	analyzed
2292	Crash: Buffer overflow in rtmp_open() [libavformat/rtmpproto.c]	marcel123		"I have been working with RTMP streaming to YouTube. The URLs that YouTube generates when creating their ""Live Events"" are very long. I was getting a heap corruption which I tracked down to the following:

In rtmpproto.c

#define APP_MAX_LENGTH 128

YouTube generates URLs where the app portion of the URL is usually longer than 128 bytes. The code in rtmp_open() only allocates APP_MAX_LENGTH bytes and does not check for an overflow. As a result, the long YouTube RTMP URL is causing a heap corruption.

I verified that allocating the appropriate size buffer does fix the problem I was seeing.

"	defect	closed	important	avformat	git-master	fixed	RTMP	msamek@…			0	0