[Live-devel] Heap-buffer-overflow in live.2023.06.16

[Ross Finlayson]

> On Jun 17, 2023, at 8:39 PM, Meng Ruijie <ruijie_meng at u.nus.edu> wrote:
> 
> Sorry, we also found the heap-buffer-overflow bug

No you haven’t “found” a bug.  You ran a piece of software that claimed that there is a "heap-buffer-overflow".  That doesn’t necessarily mean that there really is a "heap-buffer-overflow”, or any real bug at all.

In particular, the line that this software reported: "BasicUsageEnvironment/BasicTaskScheduler.cpp:115”:

	if (FD_ISSET(i, &fReadSet) || FD_ISSET(i, &fWriteSet) || FD_ISSET(i, &fExceptionSet)) {

has been in this code for many years, and nobody has ever reported any problems with it.

If you still believe that there’s a bug in the code, then you’re going to be a lot more specific about what it is.


Ross Finlayson
Live Networks, Inc.
http://www.live555.com/