#9499: The libamqp.c file has a plaintext password, and the amqp network
protocol
has security problems.
-------------------------------------+-------------------------------------
Reporter: wujian | Type: defect
Status: new | Priority: normal
Component: avformat | Version:
Keywords: amqp | unspecified
network protocol security | Blocked By:
problems |
Blocking: | Reproduced by developer: 0
Analyzed by developer: 0 |
-------------------------------------+-------------------------------------
Summary of the bug:
How to reproduce:
{{{
if (!password || *password == '\0')
'''password = "guest";'''
password_decoded = ff_urldecode(password, 0);
if (!password_decoded)
return AVERROR(ENOMEM);
user = credentials;
if (*user == '\0')
'''user = "guest";'''
}}}
Patches should be submitted to the ffmpeg-devel mailing list and not this
bug tracker.
--
Ticket URL: <https://trac.ffmpeg.org/ticket/9499>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker_______________________________________________
FFmpeg-trac mailing list
[email protected]
https://ffmpeg.org/mailman/listinfo/ffmpeg-trac
To unsubscribe, visit link above, or email
[email protected] with subject "unsubscribe".
