1<testcase> 2 3# Informational 4# Bang on RTP by 5# 1) giving an evil payload (with $) 6# 2) Giving evil content (SDP starting with $) 7# 3) packing rtp after headers, after content, and at the start 8<info> 9<keywords> 10RTSP 11RTP 12</keywords> 13</info> 14 15# Server-side 16<reply> 17<data1> 18RTSP/1.0 200 OK 19Server: RTSPD/libcurl-test 20Session: asdf 21CSeq: 1 22Transport: RTP/AVP/TCP;unicast;interleaved=0-1 23 24</data1> 25 26<data2> 27RTSP/1.0 200 OK 28Server: RTSPD/libcurl-test 29CSeq: 2 30Session: asdf 31 32</data2> 33 34<data3> 35RTSP/1.0 200 OK 36Server: RTSPD/libcurl-test 37Cseq: 3 38Content-Length: 4 39Content-Type: fake/evil 40 41$99 42</data3> 43 44<data4> 45RTSP/1.0 200 OK 46Server: RTSPD/libcurl-test 47Session: asdf 48CSeq: 4 49 50</data4> 51 52<servercmd> 53rtp: part 2 channel 1 size 10 54rtp: part 2 channel 0 size 500 55rtp: part 2 channel 0 size 196 56rtp: part 2 channel 0 size 124 57rtp: part 2 channel 0 size 824 58rtp: part 2 channel 0 size 18 size_err -6 59rtp: part 3 channel 1 size 10 60rtp: part 3 channel 0 size 50 61rtp: part 4 channel 0 size 798 62rtp: part 4 channel 0 size 42 63rtp: part 4 channel 1 size 30 64rtp: part 4 channel 0 size 2048 65rtp: part 4 channel 0 size 85 66rtp: part 4 channel 1 size 24 67rtp: part 4 channel 0 size 17 size_err -4 68rtp: part 4 channel 0 size 33 69rtp: part 4 channel 0 size 127 70rtp: part 4 channel 1 size 24 size_err 11 71rtp: part 4 channel 0 size 37 72rtp: part 4 channel 0 size 63 73</servercmd> 74</reply> 75 76# Client-Side 77<client> 78<server> 79rtsp 80</server> 81<tool> 82lib%TESTNUMBER 83</tool> 84 85<name> 86RTSP RTP Interleaving Test 87</name> 88<command> 89rtsp://%HOSTIP:%RTSPPORT/%TESTNUMBER %LOGDIR/protofile%TESTNUMBER.txt 90</command> 91</client> 92 93<verify> 94<stdout> 95RTP: message size 10, channel 1 96RTP: message size 500, channel 0 97RTP: message size 196, channel 0 98RTP: message size 124, channel 0 99RTP: message size 824, channel 0 100RTP: message size 12, channel 0 101RTP: message size 10, channel 1 102RTP: message size 50, channel 0 103RTP: message size 798, channel 0 104RTP: message size 42, channel 0 105RTP: message size 30, channel 1 106RTP: message size 2048, channel 0 107RTP: message size 85, channel 0 108RTP: message size 24, channel 1 109RTP: message size 13, channel 0 110RTP: message size 33, channel 0 111RTP: message size 127, channel 0 112RTP: message size 35, channel 1 113RTP PAYLOAD END CORRUPTED (11), [$] 114RTP: message size 63, channel 0 115</stdout> 116 117<file name="%LOGDIR/protofile%TESTNUMBER.txt"> 118$99 119</file> 120</verify> 121 122</testcase> 123