[FFmpeg-devel] [PATCH] avformat/mov: Disallow ".." in dref unless use_absolute_path is set

Michael Niedermayer michaelni at gmx.at
Mon Mar 16 03:59:34 CET 2015


On Sat, Mar 14, 2015 at 09:43:07PM +0100, Michael Niedermayer wrote:
> as this kind of allows to circumvent it to some extend.
> We also could add a separate parameter or value to choose this
> 
> Found-by: ramiro
> Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
> ---
>  libavformat/mov.c |    3 +++
>  1 file changed, 3 insertions(+)

applied


[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

DNS cache poisoning attacks, popular search engine, Google internet authority
dont be evil, please
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20150316/022729aa/attachment.asc>


More information about the ffmpeg-devel mailing list