This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg.

commit 23c8123d5b3cacdddb1f627d6817cfaef515423f
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Tue Jan 6 23:30:47 2026 +0100
Commit:     Timo Rothenpieler <[email protected]>
CommitDate: Tue Jan 13 21:56:14 2026 +0000

    avformat/http: Check white and blacklists on redirects
    
    Noticed while fixing the previous
    
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavformat/http.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/libavformat/http.c b/libavformat/http.c
index 58c704a7ad..6ee498b4df 100644
--- a/libavformat/http.c
+++ b/libavformat/http.c
@@ -242,6 +242,16 @@ static int http_open_cnx_internal(URLContext *h, 
AVDictionary **options)
                  proxy_path && av_strstart(proxy_path, "http://";, NULL);
     freeenv_utf8(env_no_proxy);
 
+    if (h->protocol_whitelist && av_match_list(proto, h->protocol_whitelist, 
',') <= 0) {
+        av_log(h, AV_LOG_ERROR, "Protocol '%s' not on whitelist '%s'!\n", 
proto, h->protocol_whitelist);
+        return AVERROR(EINVAL);
+    }
+
+    if (h->protocol_blacklist && av_match_list(proto, h->protocol_blacklist, 
',') > 0) {
+        av_log(h, AV_LOG_ERROR, "Protocol '%s' on blacklist '%s'!\n", proto, 
h->protocol_blacklist);
+        return AVERROR(EINVAL);
+    }
+
     if (!strcmp(proto, "https")) {
         lower_proto = "tls";
         use_proxy   = 0;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to