Michael Niedermayer 4fd05b6aee fftools/ffmpeg_demux: Check metadata provided filename ...

Fixes: path traversal with  -dump_attachment:t
Fixes: malicious.mkv

Based on code from libavformat/concatdec.c
This will be factored out possibly into libavutil once there is agreement on the API

Found-by: Shangzhi Xu <mxu490469@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1e7d7c4f52)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

2026-05-03 19:56:51 +02:00

..

graph

…

resources

…

textformat

…

cmdutils.c

…

cmdutils.h

…

ffmpeg_dec.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_demux.c

fftools/ffmpeg_demux: Check metadata provided filename

2026-05-03 19:56:51 +02:00

ffmpeg_enc.c

…

ffmpeg_filter.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_hw.c

…

ffmpeg_mux_init.c

fftools/ffmpeg_mux_init: Use 64bit for score computation in map_auto_video()

2025-08-19 17:56:47 +02:00

ffmpeg_mux.c

…

ffmpeg_mux.h

…

ffmpeg_opt.c

fftools/ffmpeg_opt: limit recursion of presets

2026-05-03 19:50:04 +02:00

ffmpeg_sched.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_sched.h

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_utils.h

…

ffmpeg.c

fftools/ffmpeg: fix gracefully shutdown

2025-09-22 22:46:25 +02:00

ffmpeg.h

fftools/ffmpeg_opt: limit recursion of presets

2026-05-03 19:50:04 +02:00

ffplay_renderer.c

…

ffplay_renderer.h

…

ffplay.c

…

ffprobe.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

fftools.manifest

…

fftoolsres.rc

…

fopen_utf8.h

…

Makefile

…

opt_common.c

…

opt_common.h

…

sync_queue.c

…

sync_queue.h

…

thread_queue.c

…

thread_queue.h

…