{"action":"created","issue":{"url":"https://api.github.com/repos/cisco/libsrtp/issues/117","labels_url":"https://api.github.com/repos/cisco/libsrtp/issues/117/labels{/name}","comments_url":"https://api.github.com/repos/cisco/libsrtp/issues/117/comments","events_url":"https://api.github.com/repos/cisco/libsrtp/issues/117/events","html_url":"https://github.com/cisco/libsrtp/pull/117","id":111617610,"number":117,"title":"Prevent stack-buffer-overflow with gcc -fsanitize=address","user":{"login":"pabuhler","id":15016732,"avatar_url":"https://avatars.githubusercontent.com/u/15016732?v=3","gravatar_id":"","url":"https://api.github.com/users/pabuhler","html_url":"https://github.com/pabuhler","followers_url":"https://api.github.com/users/pabuhler/followers","following_url":"https://api.github.com/users/pabuhler/following{/other_user}","gists_url":"https://api.github.com/users/pabuhler/gists{/gist_id}","starred_url":"https://api.github.com/users/pabuhler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pabuhler/subscriptions","organizations_url":"https://api.github.com/users/pabuhler/orgs","repos_url":"https://api.github.com/users/pabuhler/repos","events_url":"https://api.github.com/users/pabuhler/events{/privacy}","received_events_url":"https://api.github.com/users/pabuhler/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-15T13:33:38Z","updated_at":"2015-10-22T20:21:43Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/cisco/libsrtp/pulls/117","html_url":"https://github.com/cisco/libsrtp/pull/117","diff_url":"https://github.com/cisco/libsrtp/pull/117.diff","patch_url":"https://github.com/cisco/libsrtp/pull/117.patch"},"body":"The value passed to srtp_aes_gcm_openssl_set_aad is not guarantied\r\nto be >= c->tag_len. Since the call to EVP_CIPHER_CTX_ctrl is a\r\ndummy call pass it a dummy tag that is large enough."},"comment":{"url":"https://api.github.com/repos/cisco/libsrtp/issues/comments/150345304","html_url":"https://github.com/cisco/libsrtp/pull/117#issuecomment-150345304","issue_url":"https://api.github.com/repos/cisco/libsrtp/issues/117","id":150345304,"user":{"login":"jfigus","id":3186778,"avatar_url":"https://avatars.githubusercontent.com/u/3186778?v=3","gravatar_id":"","url":"https://api.github.com/users/jfigus","html_url":"https://github.com/jfigus","followers_url":"https://api.github.com/users/jfigus/followers","following_url":"https://api.github.com/users/jfigus/following{/other_user}","gists_url":"https://api.github.com/users/jfigus/gists{/gist_id}","starred_url":"https://api.github.com/users/jfigus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jfigus/subscriptions","organizations_url":"https://api.github.com/users/jfigus/orgs","repos_url":"https://api.github.com/users/jfigus/repos","events_url":"https://api.github.com/users/jfigus/events{/privacy}","received_events_url":"https://api.github.com/users/jfigus/received_events","type":"User","site_admin":false},"created_at":"2015-10-22T20:21:43Z","updated_at":"2015-10-22T20:21:43Z","body":"I'm not convinced this is needed.  What's the value in passing uninitialized data on the stack as compared to whatever aad points too?"}}