On Fri, 24 Jul 2020, Steven Liu wrote:

fix ticket: 8814
if get double dot in the url, check next byte by double dot,
it there have no '/', it is not directory double dot

And what about previous byte? E.g.: http://ffmpeg.org/dummy../dummy

Regards,
Marton


Signed-off-by: Steven Liu <l...@chinaffmpeg.org>
---
libavformat/url.c | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/libavformat/url.c b/libavformat/url.c
index 20463a6674..92cb4ea116 100644
--- a/libavformat/url.c
+++ b/libavformat/url.c
@@ -97,6 +97,10 @@ static void trim_double_dot_url(char *buf, const char *rel, 
int size)
    /* set new current position if the root node is changed */
    p = root;
    while (p && (node = strstr(p, ".."))) {
+        if (node[2] != '/') {
+            av_strlcpy(buf, rel, size);;
+            return;
+        }
        av_strlcat(tmp_path, p, node - p + strlen(tmp_path));
        p = node + 3;
        sep = strrchr(tmp_path, '/');
--
2.25.0



_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".

Reply via email to