On Fri, 24 Jul 2020, Steven Liu wrote:
fix ticket: 8814 if get double dot in the url, check next byte by double dot, it there have no '/', it is not directory double dot
And what about previous byte? E.g.: http://ffmpeg.org/dummy../dummy Regards, Marton
Signed-off-by: Steven Liu <l...@chinaffmpeg.org> --- libavformat/url.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libavformat/url.c b/libavformat/url.c index 20463a6674..92cb4ea116 100644 --- a/libavformat/url.c +++ b/libavformat/url.c @@ -97,6 +97,10 @@ static void trim_double_dot_url(char *buf, const char *rel, int size) /* set new current position if the root node is changed */ p = root; while (p && (node = strstr(p, ".."))) { + if (node[2] != '/') { + av_strlcpy(buf, rel, size);; + return; + } av_strlcat(tmp_path, p, node - p + strlen(tmp_path)); p = node + 3; sep = strrchr(tmp_path, '/'); -- 2.25.0 _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".