[FFmpeg-cvslog] ffserver: fix potential buffer overflow, based on wrong fscanf format indentifier.

Martin Ettl git at videolan.org
Tue Oct 2 23:02:23 CEST 2012


ffmpeg | branch: master | Martin Ettl <ettl.martin78 at googlemail.com> | Tue Oct  2 22:57:25 2012 +0200| [f077e1fb4c912a66ab5d766fd256803821d92c67] | committer: Michael Niedermayer

ffserver: fix potential buffer overflow, based on wrong fscanf format indentifier.

Fixed Ticket1780

Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f077e1fb4c912a66ab5d766fd256803821d92c67
---

 ffserver.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ffserver.c b/ffserver.c
index 7fb61d0..cb7e3ae 100644
--- a/ffserver.c
+++ b/ffserver.c
@@ -2029,7 +2029,7 @@ static void compute_status(HTTPContext *c)
                         char cpuperc[10];
                         char cpuused[64];
 
-                        if (fscanf(pid_stat, "%10s %64s", cpuperc,
+                        if (fscanf(pid_stat, "%9s %63s", cpuperc,
                                    cpuused) == 2) {
                             avio_printf(pb, "Currently using %s%% of the cpu. Total time used %s.\n",
                                          cpuperc, cpuused);



More information about the ffmpeg-cvslog mailing list