Fix RTCP SR SDES length field - close #1541

diff --git a/modules/stream_out/rtcp.c b/modules/stream_out/rtcp.c
index f0beee9677cd4e8b1944e79b084e7948ccffe4a9..f9ead76e617bcbe333a078b2c85d488c836e89f9 100644 (file)
--- a/modules/stream_out/rtcp.c
+++ b/modules/stream_out/rtcp.c
@@ -149,7 +149,7 @@ rtcp_sender_t *OpenRTCP (vlc_object_t *obj, int rtp_fd, int proto,
 
     while ((ptr - sdes) & 3) /* 32-bits padding */
         *ptr++ = 0;
-    SetWBE (lenptr, ptr - sdes);
+    SetWBE (lenptr, (ptr - sdes - 1) >> 2);
 
     rtcp->length = ptr - rtcp->payload;
     return rtcp;