Isaac ConnorandClaude Opus 4.8 0014c7593c fix: bound sprop-parameter-sets copy to prevent SDP stack overflow ...

SessionDescriptor::generateFormatContext() copied the camera-controlled
SDP sprop-parameter-sets value into a fixed char pvalue[1024] stack
buffer with an unbounded strcpy(), so a malicious or MitM'd RTSP camera
returning an oversized sprop-parameter-sets in its DESCRIBE response
could overflow the stack (saved frame pointer / return address) for RCE
as the capture process user.

A real H.264 SPS/PPS base64 blob is small; refuse anything that would
not fit the buffer instead of copying it. The existing inner base64
parse loop was already bounded, so only this outer copy was unsafe.

Refs GHSA-wg5h-vcgv-74pv.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-26 22:45:00 -04:00

..

bindings.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

CMakeLists.txt

fix: link stdc++fs into libzm for std::filesystem on GCC 8

2026-06-27 11:27:47 -04:00

jinclude.h

Migrate svn to git

2013-03-17 00:45:21 +01:00

zm_analysis_thread.cpp

Wait on the packetqueue condition instead of sleeping. Should help analysis keep up with decoding better and offer faster shutdown.

2026-02-04 20:44:17 -05:00

zm_analysis_thread.h

Add Join() function

2024-10-26 14:29:40 -04:00

zm_box.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_buffer.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_buffer.h

fix: prevent null pointer dereference in Buffer::tidy()

2026-02-02 20:34:33 -05:00

zm_camera.cpp

fix: free previously-owned buffer in AssignDirect(AVFrame); nullptr-safe logs (PR #4788)

2026-06-02 21:39:16 -04:00

zm_camera.h

Reapply "fix: replace ZM_COLOUR system with AVPixelFormat for format dispatch"

2026-05-03 12:24:43 -04:00

zm_comms.cpp

fix: address multiple bugs across core source files

2026-02-03 10:18:49 -05:00

zm_comms.h

fix: correct socket copy constructor and buffer overflow in recv

2026-02-02 20:44:01 -05:00

zm_config_data.h.in

fix: add www-data to video group and font path fallback refs #4642

2026-02-23 18:19:20 -05:00

zm_config.cpp

feat: support backslash line continuation in conf.d parsers fixes #4943

2026-06-27 12:13:49 -04:00

zm_config.h

feat: add ZM_DB_SSL_VERIFY_SERVER_CERT option (portable across MySQL/MariaDB)

2026-06-14 13:20:00 +10:00

zm_crypt.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_crypt.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_crypto_generics.h

Misc: Rename namespace ZM to zm

2021-06-06 19:11:11 +02:00

zm_crypto_gnutls.h

Crypto: Implement SHA1 hashing

2021-05-30 22:56:21 +02:00

zm_crypto_openssl.h

Crypto: Implement SHA1 hashing

2021-05-30 22:56:21 +02:00

zm_db.cpp

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zm_db.h

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zm_decoder_thread.cpp

fix: flush decoder_queue on decoder thread exit to avoid stale latency offset across reconnect

2026-05-14 07:38:58 -04:00

zm_decoder_thread.h

Add Join() function

2024-10-26 14:29:40 -04:00

zm_define.h

zm_define: Include cstddef so we have size_t

2021-05-16 16:42:58 +02:00

zm_event_tag.cpp

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zm_event_tag.h

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zm_event.cpp

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zm_event.h

fix: resolve Event::Run thread hang preventing zmc clean shutdown

2026-02-12 23:00:59 -05:00

zm_eventstream.cpp

feat: add nph-zms memory diagnostics refs #5006

2026-07-26 09:48:44 -04:00

zm_eventstream.h

perf: reuse Image buffer in EventStream::sendFrame to cut per-frame heap allocations

2026-06-18 17:45:12 -04:00

zm_exception.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_exception.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_ffmpeg_camera.cpp

fix(decoder): retry hwaccel on reconnect instead of latching to software

2026-07-26 17:58:41 +03:00

zm_ffmpeg_camera.h

feat: add realtime pacing option for ffmpeg file sources

2026-07-01 10:08:58 -04:00

zm_ffmpeg_input.cpp

fix: restore generic decoder fallback for ffmpeg cameras

2026-07-19 11:26:03 -04:00

zm_ffmpeg_input.h

Cleanup constructor and add the new codec_data stuff to try out multiple codecs

2025-09-22 09:52:25 -04:00

zm_ffmpeg_output.cpp

fix: add null check and fix error message in FFmpeg_Output

2026-02-03 11:03:17 -05:00

zm_ffmpeg_output.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_ffmpeg.cpp

fix: restore generic decoder fallback for ffmpeg cameras

2026-07-19 11:26:03 -04:00

zm_ffmpeg.h

fix: restore generic decoder fallback for ffmpeg cameras

2026-07-19 11:26:03 -04:00

zm_fifo_debug.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_fifo_debug.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_fifo_stream.cpp

fix: correct error message and add null check in FifoStream

2026-02-03 11:36:53 -05:00

zm_fifo_stream.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_fifo.cpp

fix: address multiple bugs in eventstream, fifo, and monitor

2026-02-02 23:24:08 -05:00

zm_fifo.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_file_camera.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_file_camera.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_font.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_font.h

Utils: Add our own ASSERT macro

2021-05-30 21:41:58 +02:00

zm_frame.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_frame.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_group_permission.cpp

fix: resolve role-based group permissions not granting stream access

2026-03-09 15:07:14 -04:00

zm_group_permission.h

fix: resolve role-based group permissions not granting stream access

2026-03-09 15:07:14 -04:00

zm_group.cpp

fix: correct typo in Group warning message

2026-02-03 11:42:14 -05:00

zm_group.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_image_analyser.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_image_analyser.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_image.cpp

fix: convert RGB zone highlights to YUV per-pixel when overlaying onto YUV420 analysis images refs #4995

2026-07-22 12:57:45 -04:00

zm_image.h

Reapply "fix: replace ZM_COLOUR system with AVPixelFormat for format dispatch"

2026-05-03 12:24:43 -04:00

zm_jpeg.cpp

Change various cases of int img_buffer_size to size_t

2025-07-19 14:18:32 -04:00

zm_jpeg.h

Change various cases of int img_buffer_size to size_t

2025-07-19 14:18:32 -04:00

zm_libvlc_camera.cpp

fix: address review feedback on camera buffer overflow fix

2026-06-18 07:54:15 +10:00

zm_libvlc_camera.h

fix: address review feedback on camera buffer overflow fix

2026-06-18 07:54:15 +10:00

zm_libvnc_camera.cpp

fix: address review feedback on camera buffer overflow fix

2026-06-18 07:54:15 +10:00

zm_libvnc_camera.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_line.h

Polygon: Implement clipping to a boundary box

2021-05-16 19:41:45 +02:00

zm_local_camera.cpp

fix: nullptr-safe pixfmt name; route GetImage/getSnapshot through ReadShmFrame (PR #4788)

2026-05-31 09:22:09 -04:00

zm_local_camera.h

Make most Fatals into Errors

2026-01-29 18:50:42 -05:00

zm_logger.cpp

feat: add AUDIT logging level for tracking administrative changes

2026-02-23 18:19:20 -05:00

zm_logger.h

feat: add AUDIT logging level for tracking administrative changes

2026-02-23 18:19:20 -05:00

zm_mem_utils.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_monitor_amcrest.cpp

fix: add HAVE_LIBCURL preprocessor guards to fix ZM_NO_CURL=ON build

2026-03-05 02:13:59 +00:00

zm_monitor_go2rtc.cpp

feat: fall back to go2rtc H.264 transcode when native codec is undecodable

2026-07-02 15:57:51 -04:00

zm_monitor_janus.cpp

fix: add HAVE_LIBCURL preprocessor guards to fix ZM_NO_CURL=ON build

2026-03-05 02:13:59 +00:00

zm_monitor_monitorlink.cpp

fix: keep linked event open while source monitor is in ALERT state

2026-06-01 16:31:25 -04:00

zm_monitor_onvif.cpp

Merge branch 'onvif-wsse-created-race'

2026-06-14 09:15:01 -05:00

zm_monitor_onvif.h

fix: correct WSA Action for PullMessages and throttle auth error logging

2026-02-09 11:34:44 -05:00

zm_monitor_permission.cpp

fix: resolve role-based group permissions not granting stream access

2026-03-09 15:07:14 -04:00

zm_monitor_permission.h

fix: resolve role-based group permissions not granting stream access

2026-03-09 15:07:14 -04:00

zm_monitor_rtsp2web.cpp

fix: add HAVE_LIBCURL preprocessor guards to fix ZM_NO_CURL=ON build

2026-03-05 02:13:59 +00:00

zm_monitor.cpp

Merge pull request #4894 from IgorA100/patch-673172

2026-07-22 21:40:16 -04:00

zm_monitor.h

Don't use startup_keyframe_packet

2026-07-21 20:08:12 +03:00

zm_monitorlink_expression.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_monitorlink_expression.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_monitorlink_token.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_monitorstream.cpp

feat: add nph-zms memory diagnostics refs #5006

2026-07-26 09:48:44 -04:00

zm_monitorstream.h

fix: guard zms buffer_level against zero buffer count refs #4936

2026-06-18 08:21:29 +10:00

zm_mpeg.cpp

fix: report AVPixelFormat in Panic messages for actionable diagnosis (PR #4788)

2026-05-26 23:03:33 -04:00

zm_mpeg.h

fix: prevent segfault when MPEG stream codec fails to open

2026-03-05 02:15:08 +00:00

zm_mqtt.cpp

fix: use mosquitto_strerror() for MQTT error codes

2026-02-02 20:53:00 -05:00

zm_mqtt.h

Fix definition of on_publish

2024-10-29 13:30:29 -04:00

zm_packet.cpp

fix: Rotate/Flip honor borrowed source linesize; size Flip dest for 32-aligned planes

2026-06-13 09:35:40 -04:00

zm_packet.h

perf: replace sleep polling with condition wait in Event::Run()

2026-02-15 15:38:07 -05:00

zm_packetqueue.cpp

fix(packetqueue): destroy packets after releasing mutex; drop dead code

2026-06-01 11:54:32 -04:00

zm_packetqueue.h

fix(packetqueue): destroy packets after releasing mutex; drop dead code

2026-06-01 11:54:32 -04:00

zm_pixformat.h

fix: include <libavutil/pixdesc.h> in zm_pixformat.h (PR #4788)

2026-06-06 11:49:30 -04:00

zm_poll_thread.cpp

fix: call Stop() before restarting in PollThread::Start()

2026-02-03 12:13:29 -05:00

zm_poll_thread.h

Adds ONVIF Motion Detection Support

2022-01-06 16:45:15 -06:00

zm_poly.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_poly.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_regexp.cpp

Port to PCRE2 (Closes: #3384).

2025-02-26 21:04:32 +11:00

zm_regexp.h

Port to PCRE2 (Closes: #3384).

2025-02-26 21:04:32 +11:00

zm_remote_camera_http.cpp

fix: bound HTTP camera response header copies to prevent buffer overflow

2026-07-26 20:30:42 -04:00

zm_remote_camera_http.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_remote_camera_nvsocket.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_remote_camera_nvsocket.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_remote_camera_rtsp.cpp

fix: nullptr-safe pixfmt name; route GetImage/getSnapshot through ReadShmFrame (PR #4788)

2026-05-31 09:22:09 -04:00

zm_remote_camera_rtsp.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_remote_camera.cpp

fix: check for empty path before accessing first character

2026-02-03 12:25:21 -05:00

zm_remote_camera.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rgb.h

Reapply "fix: replace ZM_COLOUR system with AVPixelFormat for format dispatch"

2026-05-03 12:24:43 -04:00

zm_rtp_ctrl.cpp

fix: correct NTP timestamp type truncation in RtpCtrlThread

2026-02-03 12:34:21 -05:00

zm_rtp_ctrl.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtp_data.cpp

fix: correct type mismatches in RtpDataThread

2026-02-03 12:45:56 -05:00

zm_rtp_data.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtp_source.cpp

fix: prevent division by zero in RtpSource::updateRtcpData

2026-02-03 12:47:14 -05:00

zm_rtp_source.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtp.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtp.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_auth.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_auth.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_adts_source.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_adts_source.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_authenticator.h

Fix Authenticate as nonce is now internal

2026-01-09 11:43:15 -05:00

zm_rtsp_server_device_source.cpp

Replace C-style casts with C++ static_cast for intmax_t

2026-01-05 13:36:16 +00:00

zm_rtsp_server_device_source.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_adts_source.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_adts_source.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_audio_source.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_audio_source.h

Add av1 support

2026-01-31 12:43:03 -05:00

zm_rtsp_server_fifo_av1_source.cpp

Add zm_rtsp_server_fifo_av1_source

2026-01-31 16:19:38 -05:00

zm_rtsp_server_fifo_av1_source.h

Add zm_rtsp_server_fifo_av1_source

2026-01-31 16:19:38 -05:00

zm_rtsp_server_fifo_h264_source.cpp

fix: prevent underflow and type mismatch in H264 fifo source

2026-01-30 15:30:40 -05:00

zm_rtsp_server_fifo_h264_source.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_source.cpp

refactor: make zm_terminate a std::atomic<bool>

2026-06-14 19:11:51 -04:00

zm_rtsp_server_fifo_source.h

fix: multiple issues in zm_rtsp_server_fifo_source

2026-01-30 14:49:53 -05:00

zm_rtsp_server_fifo_video_source.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_fifo_video_source.h

Add av1 support

2026-01-31 12:43:03 -05:00

zm_rtsp_server_frame.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_server_media_subsession.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_server_media_subsession.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_unicast_server_media_subsession.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server_unicast_server_media_subsession.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_rtsp_server.cpp

fix: delete FifoSources before RemoveSession on reconnect failure

2026-06-11 08:47:13 -04:00

zm_rtsp.cpp

fix: add null checks in RtspThread to prevent crashes

2026-02-03 12:28:30 -05:00

zm_rtsp.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_sdp.cpp

fix: bound sprop-parameter-sets copy to prevent SDP stack overflow

2026-07-26 22:45:00 -04:00

zm_sdp.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_sendfile.h

Fix complaint

2023-01-18 16:01:42 -05:00

zm_server.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_server.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_signal.cpp

refactor: make zm_terminate a std::atomic<bool>

2026-06-14 19:11:51 -04:00

zm_signal.h

refactor: make zm_terminate a std::atomic<bool>

2026-06-14 19:11:51 -04:00

zm_storage.cpp

fix: add empty checks and use safer string functions in Storage

2026-02-03 12:30:06 -05:00

zm_storage.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_stream.cpp

fix: prevent segfault when MPEG stream codec fails to open

2026-03-05 02:15:08 +00:00

zm_stream.h

fix: address review feedback - endian decode, send_twice init, setLastViewed, curr_frame_id gating

2026-05-17 03:29:41 +00:00

zm_swscale.cpp

feat: preserve full-range colour when converting YUVJ frames via swscale

2026-07-08 19:21:25 -04:00

zm_swscale.h

fix: corrupted scaled/converted output for rotated monitors — SWScale guessed buffer alignment from width

2026-06-13 10:19:09 +10:00

zm_tag.cpp

Add tags support to events.

2025-07-05 08:09:09 -04:00

zm_tag.h

Add tags support to events.

2025-07-05 08:09:09 -04:00

zm_time.cpp

fix: store event StartDateTime with second precision to match disk path refs #4870

2026-06-03 08:42:10 -04:00

zm_time.h

refactor: move format_absolute_time_iso8601 from zm_monitor_onvif to zm_time

2026-02-12 16:53:39 -05:00

zm_uri.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_uri.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_user.cpp

fix: use HTTP_X_FORWARDED_FOR in auth hash validation to fix AUTH_HASH_IPS with reverse proxy

2026-05-04 14:53:38 +00:00

zm_user.h

fix: resolve role-based group permissions not granting stream access

2026-03-09 15:07:14 -04:00

zm_utils.cpp

feat: add nph-zms memory diagnostics refs #5006

2026-07-26 09:48:44 -04:00

zm_utils.h

fix: bound HTTP camera response header copies to prevent buffer overflow

2026-07-26 20:30:42 -04:00

zm_vector2.h

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zm_videostore.cpp

fix: guard against null video out stream in encode path fixes #4946

2026-06-27 12:13:49 -04:00

zm_videostore.h

fix: keep VideoStore path in sync when incomplete file is renamed

2026-06-19 09:52:36 -04:00

zm_zone_stats.h

perf: reduce logging overhead and string temporaries in Analyse()

2026-02-07 22:52:15 -05:00

zm_zone.cpp

fix: build zone alarm highlights in YUV420P to stop spurious Colourise warning

2026-06-26 16:10:07 -04:00

zm_zone.h

feat: store zone coordinates as percentages for resolution independence (src only)

2026-02-12 18:06:56 -05:00

zm.cpp

Move exit_zms to exit_zm in zm.cpp

2026-01-05 16:36:36 -05:00

zm.h

Move exit_zms to exit_zm in zm.cpp

2026-01-05 16:36:36 -05:00

zma.cpp

fix: return the insert id as uint64_t so event ids past 2^31 survive

2026-07-21 18:01:05 -04:00

zmbenchmark.cpp

Format code using astyle google format

2024-03-26 13:43:58 -05:00

zmc.cpp

fix: prevent empty events in ONDEMAND mode and fix VideoStore fd/codec leaks

2026-04-10 08:40:26 -04:00

zms.cpp

feat: add nph-zms memory diagnostics refs #5006

2026-07-26 09:48:44 -04:00

zmu.cpp

Remove unused loop index in zmu list output

2025-12-31 22:29:37 +11:00