Michael Niedermayer f5ea126b27 fftools/ffmpeg_demux: Check metadata provided filename ... Fixes: path traversal with -dump_attachment:t Fixes: malicious.mkv Based on code from libavformat/concatdec.c This will be factored out possibly into libavutil once there is agreement on the API Found-by: Shangzhi Xu <mxu490469@gmail.com> Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> (cherry picked from commit 1e7d7c4f52) Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>		2026-05-04 17:13:28 +02:00
..
cmdutils.c	fftools/cmdutils: Add protective () to FLAGS	2024-07-24 16:52:17 +02:00
cmdutils.h
ffmpeg.c	fftools/ffmpeg: Check read() for failure	2024-07-24 16:52:25 +02:00
ffmpeg.h	fftools/ffmpeg_opt: limit recursion of presets	2026-05-04 17:13:19 +02:00
ffmpeg_dec.c
ffmpeg_demux.c	fftools/ffmpeg_demux: Check metadata provided filename	2026-05-04 17:13:28 +02:00
ffmpeg_enc.c	fftools/ffmpeg_enc: Initialize fd	2024-07-24 16:52:26 +02:00
ffmpeg_filter.c
ffmpeg_hw.c
ffmpeg_mux.c
ffmpeg_mux.h
ffmpeg_mux_init.c	fftools/ffmpeg_mux_init: Fix double-free on error	2025-11-21 20:56:58 +01:00
ffmpeg_opt.c	fftools/ffmpeg_opt: limit recursion of presets	2026-05-04 17:13:19 +02:00
ffplay.c
ffprobe.c
fftools.manifest
fftoolsres.rc
fopen_utf8.h
Makefile
objpool.c
objpool.h
opt_common.c
opt_common.h
sync_queue.c
sync_queue.h
thread_queue.c
thread_queue.h