This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/8.1 in repository ffmpeg.
commit d3384056a5297f772022763ae3c82b81f364645d Author: Anxious Koisi <[email protected]> AuthorDate: Wed Aug 12 00:26:58 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sat Sep 19 14:27:07 2026 +0200 avformat/gopher: Fix CRLF injection Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit f92584948489dfcc1ec36612455617a7f7700840) Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/gopher.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavformat/gopher.c b/libavformat/gopher.c index b022494981..c70a58b82a 100644 --- a/libavformat/gopher.c +++ b/libavformat/gopher.c @@ -63,6 +63,11 @@ static int gopher_connect(URLContext *h, const char *path) return AVERROR(EINVAL); } + if (strpbrk(path, "\r\n")) { + av_log(h, AV_LOG_ERROR, "Gopher path contains CRLF characters\n"); + return AVERROR(EINVAL); + } + /* send gopher sector */ snprintf(buffer, sizeof(buffer), "%s\r\n", path); -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
