Module: libav
Branch: master
Commit: 6095388812ce1b2a95e9917b89e5857639208f88

Author:    Kirill Zorin <[email protected]>
Committer: Martin Storsjö <[email protected]>
Date:      Wed Jun 15 19:18:29 2011 +0200

mmsh: fixed printf injection bug in mmsh request

Signed-off-by: Martin Storsjö <[email protected]>

---

 libavformat/mmsh.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/libavformat/mmsh.c b/libavformat/mmsh.c
index b19973e..af040e2 100644
--- a/libavformat/mmsh.c
+++ b/libavformat/mmsh.c
@@ -231,7 +231,7 @@ static int mmsh_open(URLContext *h, const char *uri, int 
flags)
         host, sizeof(host), &port, path, sizeof(path), location);
     if (port<0)
         port = 80; // default mmsh protocol port
-    ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, path);
+    ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, "%s", 
path);
 
     if (ffurl_alloc(&mms->mms_hd, httpname, AVIO_FLAG_READ) < 0) {
         return AVERROR(EIO);

_______________________________________________
libav-commits mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-commits

Reply via email to