<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>265427</bug_id>
          
          <creation_ts>2023-11-27 20:54:13 -0800</creation_ts>
          <short_desc>[WebRTC] Release assertion in webrtc::RtpPacketizerH264::PacketizeSingleNalu on bad input</short_desc>
          <delta_ts>2024-01-22 20:47:50 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebRTC</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=265043</see_also>
    
    <see_also>https://bugs.webkit.org/show_bug.cgi?id=265422</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>267906</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="David Kilzer (:ddkilzer)">ddkilzer</reporter>
          <assigned_to name="David Kilzer (:ddkilzer)">ddkilzer</assigned_to>
          <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1995157</commentid>
    <comment_count>0</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2023-11-27 20:54:13 -0800</bug_when>
    <thetext>Release assertion in webrtc::RtpPacketizerH264::PacketizeSingleNalu on bad input.

This release assertion fires when invalid input is passed in to `webrtc::RtpPacketizerH264::RtpPacketizerH264()` in `Source/ThirdParty/libwebrtc/Source/webrtc/modules/rtp_rtcp/source/rtp_format_h264.cc`:

```
  [...]
   RTC_CHECK_GT(fragment.size(), 0u);
   packets_.push(PacketUnit(fragment, true /* first */, true /* last */,
                            false /* aggregated */, fragment[0]));
   ++num_packets_left_;
   return true;
 }
```

&lt;rdar://118861718&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1995163</commentid>
    <comment_count>1</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2023-11-27 21:01:27 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/20972</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1995308</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-11-28 08:24:32 -0800</bug_when>
    <thetext>Committed 271216@main (5755e4b0e628): &lt;https://commits.webkit.org/271216@main&gt;

Reviewed commits have been landed. Closing PR #20972 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2006798</commentid>
    <comment_count>3</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2024-01-22 20:43:04 -0800</bug_when>
    <thetext>Closing this as the bug was fixed a in different way.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2006799</commentid>
    <comment_count>4</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2024-01-22 20:43:49 -0800</bug_when>
    <thetext>(In reply to David Kilzer (:ddkilzer) from comment #3)
&gt; Closing this as the bug was fixed a in different way.

Oops, wrong bug.  Resolved/Fixed.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>