Page 1 of 1

librtmp coredump issue

Posted: Tue Mar 15, 2016 10:36 am
by TihsYloH
When we call RTMP_ReadPacket, if the packet is not ready the packet->m_body will be saved in r->m_vecChannelsIn.
At the second time, the r->m_vecChannelsIn will be copy to packet, if the read call is failed then, the packet->m_body will be in r->m_vecChannelsIn[packet->m_nChannel] and packet, when we free r or packet , the ptr will free twice

memcpy(packet, r->m_vecChannelsIn[packet->m_nChannel],