Commit 05c8198d authored by Rémi Denis-Courmont's avatar Rémi Denis-Courmont

Remove VLCOPT support from M3U parser.

This was blatantly insecure.
parent b83bd217
......@@ -145,6 +145,13 @@ static int Demux( demux_t *p_demux )
if( psz_artist )
psz_artist = strdup( psz_artist );
}
#if 0
/* You're going to need a pretty strong explanation, why
* this is not a big security hole if you are to uncomment
* this piece of code. Potentially untrusted input file must
* not be allowed to specify options in an open-handed fashion.
* -- Courmisch
*/
else if( !strncasecmp( psz_parse, "EXTVLCOPT:",
sizeof("EXTVLCOPT:") -1 ) )
{
......@@ -158,6 +165,7 @@ static int Demux( demux_t *p_demux )
INSERT_ELEM( ppsz_options, i_options, i_options,
psz_option );
}
#endif
}
else if( !strncasecmp( psz_parse, "RTSPtext", sizeof("RTSPtext") -1 ) )
{
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment