ffmpeg/fftools
Michael Niedermayer 72287bbb6b
fftools/ffmpeg_demux: Check metadata provided filename
Fixes: path traversal with  -dump_attachment:t
Fixes: malicious.mkv

Based on code from libavformat/concatdec.c
This will be factored out possibly into libavutil once there is agreement on the API

Found-by: Shangzhi Xu <mxu490469@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1e7d7c4f52)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2026-05-04 15:57:18 +02:00
..
cmdutils.c fftools/cmdutils: don't try to load arguments from file if not needed 2025-09-08 02:13:09 +02:00
cmdutils.h fftools/ffmpeg: add support for multiview video 2024-09-23 17:15:02 +02:00
ffmpeg.c fftools/ffmpeg: fix gracefully shutdown 2025-09-14 00:31:17 +02:00
ffmpeg.h fftools/ffmpeg_opt: limit recursion of presets 2026-05-04 15:57:09 +02:00
ffmpeg_dec.c fftools/ffmpeg: add support for multiview video 2024-09-23 17:15:02 +02:00
ffmpeg_demux.c fftools/ffmpeg_demux: Check metadata provided filename 2026-05-04 15:57:18 +02:00
ffmpeg_enc.c fftools/ffmpeg_mux_init: apply encoder options manually 2024-07-03 11:38:52 +02:00
ffmpeg_filter.c fftools/ffmpeg_filter: close all no-longer needed inputs 2025-11-27 13:27:54 +01:00
ffmpeg_hw.c avutil/common: Don't auto-include mem.h 2024-03-31 00:08:43 +01:00
ffmpeg_mux.c fftools/ffmpeg_mux_init: make encoder_opts local to ost_add() 2024-07-03 11:38:52 +02:00
ffmpeg_mux.h fftools/ffmpeg: replace MATCH_PER_STREAM_OPT(.., str, ..) with a function 2024-08-13 10:28:54 +02:00
ffmpeg_mux_init.c fftools/ffmpeg_mux_init: Use 64bit for score computation in map_auto_video() 2025-09-08 02:13:31 +02:00
ffmpeg_opt.c fftools/ffmpeg_opt: limit recursion of presets 2026-05-04 15:57:09 +02:00
ffmpeg_sched.c fftools/ffmpeg_sched: prevent demuxers from getting stuck 2025-11-13 13:38:43 +01:00
ffmpeg_sched.h fftools/ffmpeg_sched: allow decoders to have multiple outputs 2024-09-23 17:15:02 +02:00
ffmpeg_utils.h fftools/ffmpeg: prefer real errors over EOF in err_merge() 2024-07-24 08:20:21 +02:00
ffplay.c fftools/ffplay: fix crash when vk renderer is null 2024-11-06 16:50:56 +08:00
ffplay_renderer.c fftools/ffplay_renderer: use correct NULL value for Vulkan type 2024-06-25 00:19:03 +02:00
ffplay_renderer.h fftools/ffplay: add hwaccel decoding support 2023-11-15 01:20:11 +08:00
ffprobe.c lavu/frame: add side data storing view ID for multi-view video 2024-09-23 17:11:38 +02:00
fftools.manifest fftools: add DPI awareness manifest 2022-08-13 14:42:52 +02:00
fftoolsres.rc fftools: add DPI awareness manifest 2022-08-13 14:42:52 +02:00
fopen_utf8.h avutil/common: Don't auto-include mem.h 2024-03-31 00:08:43 +01:00
Makefile fftools/ffmpeg: add thread-aware transcode scheduling infrastructure 2023-12-12 08:24:18 +01:00
objpool.c fftools/objpool: Don't use return with expression when returning void 2022-07-23 18:58:35 +02:00
objpool.h fftools: add an object pool 2022-07-23 11:53:19 +02:00
opt_common.c fftools/opt_common: add missing newline after printing codecs 2024-09-09 13:03:04 +02:00
opt_common.h fftools/cmdutils: hide some information listing options from basic help 2024-01-20 10:37:32 +01:00
sync_queue.c fftools/ffmpeg_demux, sync_queue: Constify a bit 2024-03-02 02:51:59 +01:00
sync_queue.h fftools/sync_queue: add debug logging 2023-05-28 10:47:59 +02:00
thread_queue.c fftools/thread_queue: count receive-finished streams as finished 2023-11-14 18:18:26 +01:00
thread_queue.h fftools: add a multistream thread-safe queue 2022-07-23 11:53:19 +02:00