MT#55283 fix possible array overflow

Change-Id: I712069a139c9e9d494e4a2fc912ab0cdacbac986 (cherry picked from commit 96432024b7) (cherry picked from commit eb9b63c9da)
3 weeks ago · d66dcddab2
parent 6cdc9ae13d
commit d66dcddab2
1 changed files with 1 additions and 1 deletions
--- a/daemon/media_socket.c
+++ b/daemon/media_socket.c
@ -1538,7 +1538,7 @@ static void fill_bundle_pt_stats(kernelize_state *s, struct call_media *bundle,
 	__auto_type iter = t_hash_table_iter(bundle->pt_media);
 	void *pt;
 	struct call_media *pt_media;
-	while (t_hash_table_iter_next(&iter, &pt, &pt_media)) {
+	while (t_hash_table_iter_next(&iter, &pt, &pt_media) && s->num_payload_types < RTPE_NUM_PAYLOAD_TYPES) {
 		struct packet_stream *pt_ps = get_media_component(pt_media, component);
 		if (!pt_ps)
 			continue; // log as error?