Skip to content

Conversation

@pabuhler
Copy link
Owner

No description provided.

vopatek and others added 11 commits December 6, 2024 15:39
srtp_get_session_keys, which is used by both srtp_unprotect_mki and
srtp_unprotect_rtcp_mki, determines the tag len from rtp_auth.

This fails when rtp_auth differ from rtcp_auth. E.g. when SRTP is used
with weak authentication but SRTCP must not (RFC 3711).

This commit splits the function in two:
srtp_get_session_keys_rtp
srtp_get_session_keys_rtcp

And adds a short auth policy test to test/srtp_driver.
At least on OSX this is now required in order get the mbedcrypto library on the link line.

I ma not sure what has changed but testing shows this to fix the issue.

cisco#700

(cherry picked from commit 981d695)
explicitly look for mbedcrypto dependency
…-auth

Fix srtp_unprotect_rtcp_mki when RTP auth != RTCP
 - The definition for the function has the signature:
   `srtp_err_status_t srtp_remove_stream(srtp_t session, uint32_t ssrc)`
 - This is not always same as the signature present in srtp.h:
   `srtp_err_status_t srtp_remove_stream(srtp_t session, unsigned int ssrc)`

This causes function signature mismatch.
Aligned the signature from `srtp.h` with the definition using `uint32_t`
Git hub is moving to ubuntu-latest on GitHub is moving
to 24.04 and there re issues installing clang-format-12 .

(cherry picked from commit 2a6c15d)
update formatting scripts to  clang-format-14
update upload-artifact version in cifuzz task
…am_signature

Fix function signature mismatch for `srtp_remove_stream`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants