diff options
| author | František Dvořák <valtri@users.sourceforge.net> | 2003-10-20 08:36:56 +0000 |
|---|---|---|
| committer | František Dvořák <valtri@users.sourceforge.net> | 2003-10-20 08:36:56 +0000 |
| commit | 442f9954b62477da117125772d5b5f5321a38182 (patch) | |
| tree | 9b01080897706953b2dde6ed93a3bad14ab2b1f4 /src/xine-engine/configfile.c | |
| parent | 4b23b23a6098c7f33737b1f69be0304658bb96ae (diff) | |
| download | xine-lib-442f9954b62477da117125772d5b5f5321a38182.tar.gz xine-lib-442f9954b62477da117125772d5b5f5321a38182.tar.bz2 | |
Clog the security hole in RIP input plugin. Streams may be saved only into onle directory.
Note, this is patch only for xine-engine. It doesn't cover cfg:// MRLs used by xine-ui.
CVS patchset: 5558
CVS date: 2003/10/20 08:36:56
Diffstat (limited to 'src/xine-engine/configfile.c')
| -rw-r--r-- | src/xine-engine/configfile.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/xine-engine/configfile.c b/src/xine-engine/configfile.c index 28cc51257..413e158a4 100644 --- a/src/xine-engine/configfile.c +++ b/src/xine-engine/configfile.c @@ -17,7 +17,7 @@ * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA * - * $Id: configfile.c,v 1.50 2003/07/31 11:59:10 mroi Exp $ + * $Id: configfile.c,v 1.51 2003/10/20 08:36:56 valtri Exp $ * * config object (was: file) management - implementation * @@ -976,6 +976,12 @@ int xine_config_change_opt(config_values_t *config, const char *opt) { entry = config->lookup_entry(config, key); + if(entry->exp_level >= XINE_CONFIG_SECURITY) { + printf(_("configfile: entry '%s' mustn't be modified from MRL\n"), key); + free(key); + return -1; + } + if(entry) { switch(entry->type) { |