diff options
author | František Dvořák <valtri@users.sourceforge.net> | 2004-01-23 00:01:08 +0000 |
---|---|---|
committer | František Dvořák <valtri@users.sourceforge.net> | 2004-01-23 00:01:08 +0000 |
commit | f7df7132bfe4b2750e3b9dec247139cd806f86f9 (patch) | |
tree | 34615eaa778b0b2c99641102912c59e2ff05cf69 /src/input/mmsh.c | |
parent | 09b3a74437282333d1c8727d3af1a3c920335aa9 (diff) | |
download | xine-lib-f7df7132bfe4b2750e3b9dec247139cd806f86f9.tar.gz xine-lib-f7df7132bfe4b2750e3b9dec247139cd806f86f9.tar.bz2 |
Security patch for input_http and using http status string in mmsh.c (cut&paste).
CVS patchset: 6060
CVS date: 2004/01/23 00:01:08
Diffstat (limited to 'src/input/mmsh.c')
-rw-r--r-- | src/input/mmsh.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/input/mmsh.c b/src/input/mmsh.c index 84e2beea7..425b957f8 100644 --- a/src/input/mmsh.c +++ b/src/input/mmsh.c @@ -17,7 +17,7 @@ * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA * - * $Id: mmsh.c,v 1.26 2003/12/09 00:02:30 f1rmb Exp $ + * $Id: mmsh.c,v 1.27 2004/01/23 00:01:15 valtri Exp $ * * MMS over HTTP protocol * written by Thibaut Mattern @@ -266,10 +266,10 @@ static int get_answer (mmsh_t *this) { if (linenum == 1) { int httpver, httpsub, httpcode; - char httpstatus[100]; + char httpstatus[51]; - if (sscanf(this->buf, "HTTP/%d.%d %d", &httpver, &httpsub, - &httpcode) != 3) { + if (sscanf(this->buf, "HTTP/%d.%d %d %50[^\015\012]", &httpver, &httpsub, + &httpcode, httpstatus) != 4) { xine_log (this->stream->xine, XINE_LOG_MSG, _("libmmsh: bad response format\n")); return 0; |