Fix the exact same remote DoS as in RTSP stream output

(SETUP without Transport:)

diff --git a/modules/misc/rtsp.c b/modules/misc/rtsp.c
index b80e03b8005e1e5d552a6165c8e54a84bdded5b7..c1f6800794fb05b202a0fed0e81637540f3b3c48 100644 (file)
--- a/modules/misc/rtsp.c
+++ b/modules/misc/rtsp.c
@@ -924,6 +924,11 @@ static int RtspCallback( httpd_callback_sys_t *p_args, httpd_client_t *cl,
         {
             psz_playnow = httpd_MsgGet( query, "x-playNow" );
             psz_transport = httpd_MsgGet( query, "Transport" );
+            if( psz_transport == NULL )
+            {
+                answer->i_status = 400;
+                break;
+            }
             msg_Dbg( p_vod, "HTTPD_MSG_SETUP: transport=%s", psz_transport );
 
             if( strstr( psz_transport, "unicast" ) &&