Module: libav
Branch: release/11
Commit: 02bb309be4d23dfa4a84c199b7b0d7ab01392f0a

Author:    Sean McGovern <[email protected]>
Committer: Vittorio Giovara <[email protected]>
Date:      Thu Feb 18 18:51:12 2016 -0500

concat: disable by default

It is a known security issue.

Also, issue a Big Fat Warning if the user explicity requests it.

Original patch by Luca Barbato <[email protected]>

---

 configure |    5 +++++
 1 file changed, 5 insertions(+)

diff --git a/configure b/configure
index e0057e7..d5629fe 100755
--- a/configure
+++ b/configure
@@ -2335,6 +2335,9 @@ for n in $COMPONENT_LIST; do
     eval ${n}_if_any="\$$v"
 done
 
+# It is a security issue
+disable concat_protocol
+
 enable $ARCH_EXT_LIST
 
 die_unknown(){
@@ -2456,6 +2459,8 @@ for opt do
     esac
 done
 
+enabled concat_protocol && warn "The concat protocol is a known vulnerability 
vector. Tread carefully."
+
 disabled logging && logfile=/dev/null
 
 echo "# $0 $LIBAV_CONFIGURATION" > $logfile

_______________________________________________
libav-commits mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-commits

Reply via email to