mmsh: fixed printf injection bug in mmsh request
authorKirill Zorin <cyril.zorin@gmail.com>
Wed, 15 Jun 2011 17:18:29 +0000 (19:18 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Thu, 16 Jun 2011 01:15:21 +0000 (03:15 +0200)
libavformat/mmsh.c

index 9b432d1..64760e8 100644 (file)
@@ -231,7 +231,7 @@ static int mmsh_open(URLContext *h, const char *uri, int flags)
         host, sizeof(host), &port, path, sizeof(path), location);
     if (port<0)
         port = 80; // default mmsh protocol port
-    ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, path);
+    ff_url_join(httpname, sizeof(httpname), "http", NULL, host, port, "%s", path);
 
     if (ffurl_alloc(&mms->mms_hd, httpname, AVIO_FLAG_READ) < 0) {
         return AVERROR(EIO);