From 67fd15ff73611f3508f1fe94a39549d740a28d8a Mon Sep 17 00:00:00 2001
From: Alex Fish <alex.fish@livekit.io>
Date: Wed, 22 Jul 2026 17:45:23 -0700
Subject: [PATCH] Add bounds check before slicing into keys buffer.

---
 sdp/offer.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sdp/offer.go b/sdp/offer.go
index be32662..fa48673 100644
--- a/sdp/offer.go
+++ b/sdp/offer.go
@@ -625,6 +625,9 @@ func parseSRTPProfile(val string) (*srtp.Profile, error) {
 		if err != nil {
 			return nil, err
 		}
+		if keyLen > len(keys) {
+			return nil, fmt.Errorf("parsed key length is greater than key buffer size: keyLen: %d; len(keys): %d", keyLen, len(keys))
+		}
 		keys, salt = keys[:keyLen], keys[keyLen:]
 	}
 	return &srtp.Profile{