microsoft/ftl-sdk

Remote memory disclosure

notr1ch opened this issue 4 years ago · 1 comments

notr1ch commented 4 years ago

The code sends uninitialized stack memory dummy to remote hosts:
https://github.com/mixer/ftl-sdk/blob/d0c8469f66806b5ea738d607f7d2b000af8b1129/libftl/ingest.c#L56

Issue discovered through PVS Studio static analysis while building OBS Studio.

notr1ch commented 4 years ago

Closing as Mixer / FTL are now dead.