har0ke/FFmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

rtmp: Fix a possible access to invalid memory location when the playpath is too short.

Browse Source 
Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
Samuel Pitoiset 2012-06-11 14:21:32 +02:00 committed by Martin Storsjö
parent f862537de8
commit 0a9a225733
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavformat/rtmpproto.c
View File

@ -1141,11 +1141,11 @@ static int rtmp_open(URLContext *s, const char *uri, int flags)
goto fail; goto fail;
} }
if (!strchr(fname, ':') && if (!strchr(fname, ':') && len >= 4 &&
(!strcmp(fname + len - 4, ".f4v") || (!strcmp(fname + len - 4, ".f4v") ||
!strcmp(fname + len - 4, ".mp4"))) { !strcmp(fname + len - 4, ".mp4"))) {
memcpy(rt->playpath, "mp4:", 5); memcpy(rt->playpath, "mp4:", 5);
} else if (!strcmp(fname + len - 4, ".flv")) { } else if (len >= 4 && !strcmp(fname + len - 4, ".flv")) {
fname[len - 4] = '\0'; fname[len - 4] = '\0';
} else { } else {
rt->playpath[0] = 0; rt->playpath[0] = 0;