[FFmpeg-cvslog] mmsh: fixed printf injection bug in mmsh request
Kirill Zorin
git at videolan.org
Thu Jun 16 03:23:53 CEST 2011
ffmpeg | branch: master | Kirill Zorin <cyril.zorin at gmail.com> | Wed Jun 15 19:18:29 2011 +0200| [a0bafaabb0656ca3bb3591beba0de79f6153fdac] | committer: Michael Niedermayer
mmsh: fixed printf injection bug in mmsh request
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a0bafaabb0656ca3bb3591beba0de79f6153fdac
---
libavformat/mmsh.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/libavformat/mmsh.c b/libavformat/mmsh.c
index 9b432d1..64760e8 100644
--- a/libavformat/mmsh.c
+++ b/libavformat/mmsh.c
@@ -231,7 +231,7 @@ static int mmsh_open(URLContext *h, const char *uri, int flags)
host, sizeof(host), &port, path, sizeof(path), location);
if (port<0)
port = 80; // default mmsh protocol port
- ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, path);
+ ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, "%s", path);
if (ffurl_alloc(&mms->mms_hd, httpname, AVIO_FLAG_READ) < 0) {
return AVERROR(EIO);
More information about the ffmpeg-cvslog
mailing list