[vlc-devel] [PATCH] live555: fix the subtitles issue

[Gilles Chanteperdrix]

On 12/30/2013 04:07 PM, Rémi Denis-Courmont wrote:
> Le lundi 30 décembre 2013, 15:59:42 Gilles Chanteperdrix a écrit :
>> These dummy packets are sent after the SETUP. The server uses the NAT
>> ports instead of the ports in the SETUP.
> 
> That violates the RTSP protocol,

Well, it replaces a non working situation: NAT ports different from
client ports, with a working situation. At this point, I prefer a
solution which works while violating the protocol, than a solution which
does not work.

> will not interoperate with an off-the-shelve 
> RTSP server

Do not understand what you mean. I am discussing about what I do in an
RTSP server which is interoperating with RTSP clients, not servers. And
it interoperates with off-the-shelve clients, because if they send the
dummy packets, I use the information these dummy packets contain, and if
they do not send them, I use the ports from the RTSP SETUP.

> and seems highly insecure.

This can be arranged by modifying the payload of the "dummy" packets to
contain the RTSP session ID. And if the server ignores the packets which
do not contain a valid RTSP session ID, there is no longer any security
issue.


-- 
                                                                Gilles.