[MPlayer-cvslog] r35988 - trunk/stream/http.c

[Reimar Döffinger]

On Sun, Mar 17, 2013 at 11:50:41AM +0100, reimar wrote:
> Author: reimar
> Date: Sun Mar 17 11:50:41 2013
> New Revision: 35988
> 
> Log:
> Handle the severely broken headers QuickTime Streaming Server sends.
> 
> Instead of ending the header with \r\n\r\n it ends with
> \r\n<4 byte MP3 header>\r\n.
> And programs like wget just silently accept this without even
> printing a warning!!

I have no idea what kind of shitty quality control one must have
that this kind of thing just slips by.
This kind of thing almost tempts me to put a black hat on, because
I'd be deeply surprised if the code wasn't shitty enough to expose
a couple of trivially exploitable bugs.
But it's just some random .edu server so probably nobody cares how
many holes it has anyway (or otherwise they'd at least update it...).