[Live-devel] Stack Use After Return in handleCmd_DESCRIBE

[Martin Mirchev]

Hello Mr. Finlayson,

We still observe the stack-use-after-return bug in live.2023.06.14 while 
running in Ubuntu:20.04.

You can reproduce this bug as the README in the attachment as follows:
1. build the docker image:
     docker build . -t suaf
2. create the docker container:
     docker run -it -u root --privileged --name reproduce-suaf suaf bash
3. open two terminals:
     3.1 one run live555:
         cd /home/ubuntu/experiments/live/testProgs && ./testOnDemandRTSPServer
     3.2 another one to run the client to send requests:
         cd /home/ubuntu/experiments && aflnet-replay client-request1 RTSP 8554 1
         You can also try other client requests:
         cd /home/ubuntu/experiments && aflnet-replay client-request2 RTSP 8554 1

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20230615/a7947cd5/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SUAF.zip
Type: application/zip
Size: 11195 bytes
Desc: not available
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20230615/a7947cd5/attachment-0001.zip>