From patchwork Thu Jun 16 08:00:00 2011 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: mmsh: fixed printf injection bug in mmsh request X-Patchwork-Submitter: =?utf-8?q?Martin_Storsj=C3=B6?= X-Patchwork-Id: 4657 Message-Id: <1308211200-75278-1-git-send-email-martin@martin.st> To: libav-devel@libav.org Date: Thu, 16 Jun 2011 11:00:00 +0300 From: =?UTF-8?q?Martin=20Storsj=C3=B6?= List-Id: libav development From: Kirill Zorin Signed-off-by: Martin Storsjö --- libavformat/mmsh.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/libavformat/mmsh.c b/libavformat/mmsh.c index b19973e..af040e2 100644 --- a/libavformat/mmsh.c +++ b/libavformat/mmsh.c @@ -231,7 +231,7 @@ static int mmsh_open(URLContext *h, const char *uri, int flags) host, sizeof(host), &port, path, sizeof(path), location); if (port<0) port = 80; // default mmsh protocol port - ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, path); + ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, "%s", path); if (ffurl_alloc(&mms->mms_hd, httpname, AVIO_FLAG_READ) < 0) { return AVERROR(EIO);