From 4a7c0c4555477c9367fb45ee0cc10e4351e53930 Mon Sep 17 00:00:00 2001
From: Janne Grunau <janne-libav@jannau.net>
Date: Tue, 9 Oct 2012 20:50:50 +0200
Subject: http: use av_strlcpy instead of strcpy() without size checks

Fixes CID700730.
---
 libavformat/http.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'libavformat/http.c')

diff --git a/libavformat/http.c b/libavformat/http.c
index 43c6cbc032..9666ca3206 100644
--- a/libavformat/http.c
+++ b/libavformat/http.c
@@ -308,7 +308,7 @@ static int process_line(URLContext *h, char *line, int line_count,
         while (isspace(*p))
             p++;
         if (!av_strcasecmp(tag, "Location")) {
-            strcpy(s->location, p);
+            av_strlcpy(s->location, p, sizeof(s->location));
             *new_location = 1;
         } else if (!av_strcasecmp (tag, "Content-Length") && s->filesize == -1) {
             s->filesize = strtoll(p, NULL, 10);
-- 
cgit v1.2.3