[FFmpeg-cvslog] avformat/udp: properly check for valid ttl in url

[Limin Wang]

ffmpeg | branch: master | Limin Wang <lance.lmwang at gmail.com> | Mon Feb  7 18:22:02 2022 +0800| [1de24ee5120b175f38fa42a6b1fbfeeb9f4a50d5] | committer: Limin Wang

avformat/udp: properly check for valid ttl in url

Zhao Zhili added a ttl upper bound in commit 9daac85da8,
but the check for ttl in url is missing still.

Signed-off-by: Limin Wang <lance.lmwang at gmail.com>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1de24ee5120b175f38fa42a6b1fbfeeb9f4a50d5
---

 libavformat/udp.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/libavformat/udp.c b/libavformat/udp.c
index da56c8ee1d..401d9b6275 100644
--- a/libavformat/udp.c
+++ b/libavformat/udp.c
@@ -674,6 +674,11 @@ static int udp_open(URLContext *h, const char *uri, int flags)
         }
         if (av_find_info_tag(buf, sizeof(buf), "ttl", p)) {
             s->ttl = strtol(buf, NULL, 10);
+            if (s->ttl < 0 || s->ttl > 255) {
+                av_log(h, AV_LOG_ERROR, "ttl(%d) should be in range [0,255]\n", s->ttl);
+                ret = AVERROR(EINVAL);
+                goto fail;
+            }
         }
         if (av_find_info_tag(buf, sizeof(buf), "udplite_coverage", p)) {
             s->udplite_coverage = strtol(buf, NULL, 10);