generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

hls: disallow opening nested files in child demuxers

Browse Source
This commit is contained in:
Anton Khirnov 2016-02-15 14:47:33 +01:00
parent e192cd9ce2
commit 225e84e745
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libavformat/hls.c
View File

@ -494,6 +494,16 @@ static int save_avio_options(AVFormatContext *s)
return ret; return ret;
} }
static int nested_io_open(AVFormatContext *s, AVIOContext **pb, const char *url,
int flags, AVDictionary **opts)
{
av_log(s, AV_LOG_ERROR,
"A HLS playlist item '%s' referred to an external file '%s'. "
"Opening this file was forbidden for security reasons\n",
s->filename, url);
return AVERROR(EPERM);
}
static int hls_read_header(AVFormatContext *s) static int hls_read_header(AVFormatContext *s)
{ {
HLSContext *c = s->priv_data; HLSContext *c = s->priv_data;
@ -579,6 +589,7 @@ static int hls_read_header(AVFormatContext *s)
goto fail; goto fail;
} }
v->ctx->pb = &v->pb; v->ctx->pb = &v->pb;
v->ctx->io_open = nested_io_open;
v->stream_offset = stream_offset; v->stream_offset = stream_offset;
ret = avformat_open_input(&v->ctx, v->segments[0]->url, in_fmt, NULL); ret = avformat_open_input(&v->ctx, v->segments[0]->url, in_fmt, NULL);
if (ret < 0) if (ret < 0)