This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new f925849484 avformat/gopher: Fix CRLF injection
f925849484 is described below
commit f92584948489dfcc1ec36612455617a7f7700840
Author: Anxious Koisi <[email protected]>
AuthorDate: Wed Aug 12 00:26:58 2026 +0200
Commit: Michael Niedermayer <[email protected]>
CommitDate: Wed Aug 12 01:14:58 2026 +0200
avformat/gopher: Fix CRLF injection
Signed-off-by: Michael Niedermayer <[email protected]>
---
libavformat/gopher.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/libavformat/gopher.c b/libavformat/gopher.c
index b022494981..c70a58b82a 100644
--- a/libavformat/gopher.c
+++ b/libavformat/gopher.c
@@ -63,6 +63,11 @@ static int gopher_connect(URLContext *h, const char *path)
return AVERROR(EINVAL);
}
+ if (strpbrk(path, "\r\n")) {
+ av_log(h, AV_LOG_ERROR, "Gopher path contains CRLF characters\n");
+ return AVERROR(EINVAL);
+ }
+
/* send gopher sector */
snprintf(buffer, sizeof(buffer), "%s\r\n", path);
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
