I will give you a description of vulnerability. You should extract vulnerable functions. Write the output in following format: 
FUNCS function1, function2, ...
If you found no functions, output "NONE". Print only funcitons mentioned in description. Ignore URLs.

Here is the description:
gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.
 Make sure to only use capital letters in your entire response.
user