mirror of
https://github.com/mpv-player/mpv
synced 2024-12-17 04:15:13 +00:00
strncat() misuses, may have been exploitable.
Reported by Sascha Sommer. git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@22206 b3059339-0415-0410-9bf9-f77b7e298cf2
This commit is contained in:
parent
656c22ca16
commit
eacf95dc11
@ -832,9 +832,9 @@ fsdp_parse (const char *text_description, fsdp_description_t * dsc)
|
||||
{
|
||||
/* ignore unknown attributes, but provide access to them */
|
||||
*fsdp_buf[1] = '\0';
|
||||
strncat (fsdp_buf[1], fsdp_buf[0], MAXLONGFIELDLEN);
|
||||
strncat (fsdp_buf[1], ":", MAXLONGFIELDLEN);
|
||||
strncat (fsdp_buf[1], longfsdp_buf, MAXLONGFIELDLEN);
|
||||
strncat (fsdp_buf[1], fsdp_buf[0], MAXSHORTFIELDLEN-1);
|
||||
strncat (fsdp_buf[1], ":", MAXSHORTFIELDLEN-strlen(fsdp_buf[1])-1);
|
||||
strncat (fsdp_buf[1], longfsdp_buf, MAXSHORTFIELDLEN-strlen(fsdp_buf[1])-1);
|
||||
if (NULL == media->unidentified_attributes)
|
||||
{
|
||||
media->unidentified_attributes_count = 0;
|
||||
|
Loading…
Reference in New Issue
Block a user