diff options
| author | František Dvořák <valtri@users.sourceforge.net> | 2004-01-23 00:01:08 +0000 |
|---|---|---|
| committer | František Dvořák <valtri@users.sourceforge.net> | 2004-01-23 00:01:08 +0000 |
| commit | f7df7132bfe4b2750e3b9dec247139cd806f86f9 (patch) | |
| tree | 34615eaa778b0b2c99641102912c59e2ff05cf69 /src/input/input_http.c | |
| parent | 09b3a74437282333d1c8727d3af1a3c920335aa9 (diff) | |
| download | xine-lib-f7df7132bfe4b2750e3b9dec247139cd806f86f9.tar.gz xine-lib-f7df7132bfe4b2750e3b9dec247139cd806f86f9.tar.bz2 | |
Security patch for input_http and using http status string in mmsh.c (cut&paste).
CVS patchset: 6060
CVS date: 2004/01/23 00:01:08
Diffstat (limited to 'src/input/input_http.c')
| -rw-r--r-- | src/input/input_http.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/input/input_http.c b/src/input/input_http.c index c4eaa8eaa..da202607f 100644 --- a/src/input/input_http.c +++ b/src/input/input_http.c @@ -19,7 +19,7 @@ * * input plugin for http network streams * - * $Id: input_http.c,v 1.81 2003/12/14 22:13:23 siggi Exp $ + * $Id: input_http.c,v 1.82 2004/01/23 00:01:08 valtri Exp $ */ #ifdef HAVE_CONFIG_H @@ -714,9 +714,9 @@ static int http_plugin_open (input_plugin_t *this_gen ) { if (linenum == 1) { int httpver, httpsub; - char httpstatus[BUFSIZE]; + char httpstatus[51]; - if (sscanf(this->buf, "HTTP/%d.%d %d %[^\015\012]", &httpver, &httpsub, + if (sscanf(this->buf, "HTTP/%d.%d %d %50[^\015\012]", &httpver, &httpsub, &httpcode, httpstatus) != 4) { /* icecast ? */ |