From 6095388812ce1b2a95e9917b89e5857639208f88 Mon Sep 17 00:00:00 2001 From: Kirill Zorin Date: Wed, 15 Jun 2011 19:18:29 +0200 Subject: mmsh: fixed printf injection bug in mmsh request MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Martin Storsjö --- libavformat/mmsh.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libavformat/mmsh.c') diff --git a/libavformat/mmsh.c b/libavformat/mmsh.c index b19973ea76..af040e27a9 100644 --- a/libavformat/mmsh.c +++ b/libavformat/mmsh.c @@ -231,7 +231,7 @@ static int mmsh_open(URLContext *h, const char *uri, int flags) host, sizeof(host), &port, path, sizeof(path), location); if (port<0) port = 80; // default mmsh protocol port - ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, path); + ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, "%s", path); if (ffurl_alloc(&mms->mms_hd, httpname, AVIO_FLAG_READ) < 0) { return AVERROR(EIO); -- cgit v1.2.3