From 2ab5002e3cd27cfa8f70035369d554c97739c4d0 Mon Sep 17 00:00:00 2001 From: Hendrik Leppkes Date: Mon, 3 Aug 2015 22:02:17 +0200 Subject: [PATCH] ffmpeg: avoid scanf in keyboard command parsing Mixing stdio and low-level IO on stdin is not safe. --- ffmpeg.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/ffmpeg.c b/ffmpeg.c index 5575e2f9a4..206b3dc4a2 100644 --- a/ffmpeg.c +++ b/ffmpeg.c @@ -3428,9 +3428,17 @@ static int check_keyboard_interaction(int64_t cur_time) if(!debug) debug = 1; while(debug & (FF_DEBUG_DCT_COEFF|FF_DEBUG_VIS_QP|FF_DEBUG_VIS_MB_TYPE)) //unsupported, would just crash debug += debug; - }else - if(scanf("%d", &debug)!=1) + }else{ + char buf[32]; + int k = 0; + i = 0; + while ((k = read_key()) != '\n' && k != '\r' && i < sizeof(buf)-1) + if (k > 0) + buf[i++] = k; + buf[i] = 0; + if (k <= 0 || sscanf(buf, "%d", &debug)!=1) fprintf(stderr,"error parsing debug value\n"); + } for(i=0;ist->codec->debug = debug; }