[Live-devel] Vulnerabilities in RTPInterface::handleRead()

[Ross Finlayson]

>Here, ReadSocket() returns int while curBytesRead is declared 
>unsigned. If ReadSocket() returns -1, the above code may cause 
>problem.

You're right - thanks for noting this.

Changing the declaration of "curBytesRead" from "unsigned" to "int" 
fixes the problem.  (This will be included in the next release.)
-- 

Ross Finlayson
Live Networks, Inc.
http://www.live555.com/