It is a known security issue.

Also, issue a Big Fat Warning if the user explicity requests it.

Original patch by Luca Barbato <[email protected]>
---
Please feel free to re-word the warning text.
---
 configure |    5 +++++
 1 file changed, 5 insertions(+)

diff --git a/configure b/configure
index 0e04b8e..6a2ee81 100755
--- a/configure
+++ b/configure
@@ -2333,6 +2333,9 @@ for n in $COMPONENT_LIST; do
     eval ${n}_if_any="\$$v"
 done
 
+# It is a security issue
+disable concat_protocol
+
 enable $ARCH_EXT_LIST
 
 die_unknown(){
@@ -2454,6 +2457,8 @@ for opt do
     esac
 done
 
+enabled concat_protocol && warn "The concat protocol is a known vulnerability 
vector. Tread carefully."
+
 disabled logging && logfile=/dev/null
 
 echo "# $0 $LIBAV_CONFIGURATION" > $logfile
-- 
1.7.9.2

_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to