Dmitry Verenitsin
a047b7a258
`rtmp_rtmp2rtpH264` read the two leading bytes that select the parse branch (`data[0]` and `data[1]`) before any length check, so a video body shorter than 2 bytes read past the buffer. Reject `len < 2` at entry, before either classifier byte is dereferenced. In the NAL-unit branch, move the `pdata = data + 5` assignment below its `len < 5` check so the pointer is never formed past the end of a short buffer. Read the 2-byte big-endian SPS and PPS length prefixes byte-wise (`(pdata[0] << 8) | pdata[1]`) instead of `ntohs(*(uint16_t *)pdata)`. `pdata` walks a byte buffer at wire-controlled offsets, so the cast was an unaligned 16-bit load and a strict-aliasing violation; the byte-wise read is alignment- and endianness-independent and matches the idiom already used in the NAL-unit branch. In `rtmp_read_video_frame`, a buffered record is `len + 6` bytes (2-byte length prefix, 4-byte timestamp, `len`-byte body), but the guard only required `inuse >= len` before consuming the whole record. Require `inuse >= len + 6` so the invariant holds locally instead of relying on the writer emitting each record atomically.
FreeSWITCH
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a versatile software implementation that runs on any commodity hardware. From a Raspberry PI to a multi-core server, FreeSWITCH can unlock the telecommunications potential of any device. Combined with our hosted cloud platform, SignalWire, FreeSWITCH can interconnect with the outside world and scale to any size.
Visit https://signalwire.com or https://github.com/signalwire for more info.
Getting Started
FreeSWITCH is available on Github in source code format. You can checkout the development branch and build for many popular platforms including Linux, Windows, MacOSX and BSD. There is an issue tracker and pull request system available as part of the repo online.
See https://developer.signalwire.com/freeswitch/FreeSWITCH-Explained/ for more detailed instructions.
Additional Help
If you need assistance or have an interest in using a commercially supported build, you can contact coreteam@freeswitch.com to learn about professional services to support your project.
Voice-over-IP services - SIP / SMS - App Integrations
SignalWire is the primary sponsor of the FreeSWITCH project and was founded by the original developers of FreeSWITCH. SignalWire provides scalable services to enhance and scale your project such as SMS, SIP, Serverless Application hosting as well as programmable telecom. mod_signalwire which is distributed in this code base allows you to instantly pair with SignalWire and extend your FreeSWITCH.
Documentation
The main index for documentation is available at:
Release notes:
Install from packages
Step by step tutorials to install FreeSWITCH from packages:
- Using FSGET [Recommended]
- Debian
- Raspberry Pi
- CentOS 7
Build from source
Example Dockerfiles to build FreeSWITCH and dependencies from source:
Step by step tutorials to build FreeSWITCH with provided dependency packages:
- Debian [Recommended]
- Raspberry Pi
- CentOS 7
How to build Debian packages
Downloads
Contributions
GitHub pull requests are the recommended way to contribute to the FreeSWITCH source code:
Community
Slack is our chat system where the developers, the FreeSWITCH team, and the most active users are present. This is the place to get answers faster and chat with other users in real time. All you need to do is enter your email and verify it on the Slack signup page and you are ready to join in the discussion!
Slack Community:
Mailing list (ARCHIVED):
Thank you for using FreeSWITCH!