diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2025-01-16 00:22:05 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2025-01-17 23:33:27 +0100 |
| commit | 4c96d6bf75357ab13808efc9f08c1b41b1bf5bdf (patch) | |
| tree | c14034b43be1242f3ec053c7f7fe0607dc3a9132 | |
| parent | c6c54943d161812b3c4034116cb14f3f5c05dc43 (diff) | |
| download | ffmpeg-4c96d6bf75357ab13808efc9f08c1b41b1bf5bdf.tar.gz | |
avformat/dashdec: Check whitelist
Fixes: CVE-2023-6602, V. DASH Playlist SSRF
Found-by: Harvey Phillips of Amazon Element55 (element55)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/dashdec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/dashdec.c b/libavformat/dashdec.c index 8107280444..c3f3d7f3f8 100644 --- a/libavformat/dashdec.c +++ b/libavformat/dashdec.c @@ -446,7 +446,7 @@ static int open_url(AVFormatContext *s, AVIOContext **pb, const char *url, av_freep(pb); av_dict_copy(&tmp, *opts, 0); av_dict_copy(&tmp, opts2, 0); - ret = avio_open2(pb, url, AVIO_FLAG_READ, c->interrupt_callback, &tmp); + ret = ffio_open_whitelist(pb, url, AVIO_FLAG_READ, c->interrupt_callback, &tmp, s->protocol_whitelist, s->protocol_blacklist); if (ret >= 0) { // update cookies on http response with setcookies. char *new_cookies = NULL; @@ -1225,7 +1225,7 @@ static int parse_manifest(AVFormatContext *s, const char *url, AVIOContext *in) close_in = 1; av_dict_copy(&opts, c->avio_opts, 0); - ret = avio_open2(&in, url, AVIO_FLAG_READ, c->interrupt_callback, &opts); + ret = ffio_open_whitelist(&in, url, AVIO_FLAG_READ, c->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist); av_dict_free(&opts); if (ret < 0) return ret; |