I believe this patch fixes the issue and percent decodes the username and 
password.
Technically, this should also be done to the host part (and the path 
components?)
https://tools.ietf.org/html/rfc3986#page-21

Any comments welcome.

-- 
Deanna Earley | Lead developer | icatchercctv

w: www.icode.co.uk/icatcher | t: 01329 835335 | f: 01329 835338
Registered Office : 71 The Hundred, Romsey, SO51 8BZ. Company Number : 03428325

> -----Original Message-----
> From: live-devel [mailto:[email protected]] On Behalf Of
> Deanna Earley
> Sent: 05 March 2015 10:30
> To: '[email protected]'
> Subject: [Live-devel] RTSP authentication with special characters
> 
> Hello Ross.
> 
> The current liveMedia has a bug where it doesn't correctly handle
> "special" characters in the username and password strings when passed in
> the URL.
> 
> RFC 3986 (and predecessors) say that anything outside the "reserved" range
> can be percent encoded, but liveMedia isn't currently decoding these back
> to a normalised string.
> 
> Resending...
> Sending request: DESCRIBE rtsp://root:ab%[email protected]/axis-
> media/media.amp?videocodec=h264&streamprofile=Quality RTSP/1.0
> CSeq: 4
> Authorization: Basic cm9vdDphYiU0MGNk
> User-Agent: openRTSP (LIVE555 Streaming Media v2015.03.01)
> Accept: application/sdp
> 
> The authorisation string decodes to root:ab%40cd where it should decode to
> root:ab@cd (cm9vdDphYkBjZA==)
> 
> What are your thoughts on this?
> Is there a URL decoder function somewhere in the library that can be
> dropped in here?
> 
> Thanks
> 
> --
> Deanna Earley | Lead developer | icatchercctv
> 
> w: www.icode.co.uk/icatcher | t: 01329 835335 | f: 01329 835338
> Registered Office : 71 The Hundred, Romsey, SO51 8BZ. Company Number :
> 03428325
> 
> 
> _______________________________________________
> live-devel mailing list
> [email protected]
> http://lists.live555.com/mailman/listinfo/live-devel

Attachment: auth decode.patch
Description: auth decode.patch

_______________________________________________
live-devel mailing list
[email protected]
http://lists.live555.com/mailman/listinfo/live-devel

Reply via email to