[Mplayer-cvslog] CVS: 0_90/libmpdemux asf_streaming.c,1.36,1.37

Diego Biurrun CVS diego at mplayerhq.hu
Sun Oct 26 02:07:57 CEST 2003


Update of /cvsroot/mplayer/0_90/libmpdemux
In directory mail:/var/tmp.root/cvs-serv28974/libmpdemux

Modified Files:
	asf_streaming.c 
Log Message:
Fix for the remotely exploitable ASF vulnerability applied, ChangeLog
updated, version bumped.


Index: asf_streaming.c
===================================================================
RCS file: /cvsroot/mplayer/0_90/libmpdemux/asf_streaming.c,v
retrieving revision 1.36
retrieving revision 1.37
diff -u -r1.36 -r1.37
--- asf_streaming.c	6 Jan 2003 16:42:20 -0000	1.36
+++ asf_streaming.c	26 Oct 2003 00:07:55 -0000	1.37
@@ -495,11 +495,11 @@
 			return NULL;
 		}
 		http_set_uri( http_hdr, server_url->url );
-		sprintf( str, "Host: %s:%d", server_url->hostname, server_url->port );
+		sprintf( str, "Host: %.220s:%d", server_url->hostname, server_url->port );
 		url_free( server_url );
 	} else {
 		http_set_uri( http_hdr, url->file );
-		sprintf( str, "Host: %s:%d", url->hostname, url->port );
+		sprintf( str, "Host: %.220s:%d", url->hostname, url->port );
 	}
 	
 	http_set_field( http_hdr, str );



More information about the MPlayer-cvslog mailing list