修复fci内存越界问题

src/Rtcp/Rtcp.cpp

@@ -499,9 +499,9 @@ std::shared_ptr<RtcpFB> RtcpFB::create_l(RtcpType type, int fmt, const void *fci
     }
     }
     auto real_size = sizeof(RtcpFB) + fci_len;
     auto real_size = sizeof(RtcpFB) + fci_len;
     auto bytes = alignSize(real_size);
     auto bytes = alignSize(real_size);
-    auto ptr = (RtcpRR *) new char[bytes];
+    auto ptr = (RtcpFB *) new char[bytes];
     if (fci && fci_len) {
     if (fci && fci_len) {
-        memcpy(ptr + sizeof(RtcpFB), fci, fci_len);
+        memcpy((char *)ptr + sizeof(RtcpFB), fci, fci_len);
     }
     }
     setupHeader(ptr, type, fmt, bytes);
     setupHeader(ptr, type, fmt, bytes);
     setupPadding(ptr, bytes - real_size);
     setupPadding(ptr, bytes - real_size);