#11247: Sensitive info passed on command line may unexpectedly leak
-------------------------------------+-------------------------------------
Reporter: rayanayar | Owner: (none)
Type: enhancement | Status: closed
Priority: normal | Component: ffmpeg
Version: unspecified | Resolution:
Keywords: password | worksforme
rtsp | Blocked By:
Blocking: | Reproduced by developer: 0
Analyzed by developer: 0 |
-------------------------------------+-------------------------------------
Comment (by rayanayar):
I quickgoogled (about 10) minutes and don't understand how "concatf:"
works.
{{{
$ ./ffmpeg -protocols | grep concat
concat
concatf
$ ./ffmpeg -t 10 -i concatf:concatf.txt -vcodec copy -acodec copy "$(date
+%Y-%m-%d+%H-%M-%S).mkv"
[in#0 @ 0x6f33a40] Error opening input: Invalid data found when processing
input
Error opening input file concatf:concatf.txt.
Error opening input files: Invalid data found when processing input
}}}
This error occurs when I write to file "concatf.txt" link to "rtsp://".
If write to file "concatf.txt" path to simple media file - it works.
Do I need some additional options to allow network streams again?
But this is not necessary. Now I have "oneliner":
{{{
./ffmpeg \
-hide_banner \
-min_port 5000 -max_port 5099 \
-t 3600 \
-f concat -safe 0 -protocol_whitelist file,tcp,udp,rtp \
-i <(echo file rtsp://admin:PASSWORD@192.168.0.100/stream1) \
-vcodec copy -acodec copy \
"$(date +%Y-%m-%d+%H-%M-%S).mkv"
}}}
Yes, it is big, it is complicated, but it works, and "ps" doesn't see
password.
It works inside script, I do not need to type it by hands many times.
It works with hardware in my local network (IP-cameras), so I don't worry
about possible security risks with "-protocol_whitelist".
--
Ticket URL: <https://trac.ffmpeg.org/ticket/11247#comment:11>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker_______________________________________________
FFmpeg-trac mailing list
FFmpeg-trac@avcodec.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-trac
To unsubscribe, visit link above, or email
ffmpeg-trac-requ...@ffmpeg.org with subject "unsubscribe".
