Michael Niedermayer 4fd05b6aee fftools/ffmpeg_demux: Check metadata provided filename ...

Fixes: path traversal with  -dump_attachment:t
Fixes: malicious.mkv

Based on code from libavformat/concatdec.c
This will be factored out possibly into libavutil once there is agreement on the API

Found-by: Shangzhi Xu <mxu490469@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1e7d7c4f52)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>

2026-05-03 19:56:51 +02:00

..

graph

fftools/textformat: renamings in print_unit_int for consistency (cosmetic)

2025-06-27 00:24:35 +02:00

resources

fftools/resources/resman: Use proper logcontext

2025-06-02 00:47:16 +02:00

textformat

fftools/textformat: remove unreachable code in tf_mermaid

2025-07-05 02:35:00 +02:00

cmdutils.c

fftools/cmdutils: Add av_freep() to avoid memory leak

2025-07-20 01:05:22 +02:00

cmdutils.h

all: Fix doxy comments wrongly designated as trailing ///<

2025-03-12 17:00:24 +01:00

ffmpeg_dec.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_demux.c

fftools/ffmpeg_demux: Check metadata provided filename

2026-05-03 19:56:51 +02:00

ffmpeg_enc.c

fftools/ffmpeg_mux: move OutputStream.enc_ctx to Encoder

2024-09-30 09:29:18 +02:00

ffmpeg_filter.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_hw.c

avutil/common: Don't auto-include mem.h

2024-03-31 00:08:43 +01:00

ffmpeg_mux_init.c

fftools/ffmpeg_mux_init: Use 64bit for score computation in map_auto_video()

2025-08-19 17:56:47 +02:00

ffmpeg_mux.c

fftools/ffmpeg_mux: move OutputStream.enc_ctx to Encoder

2024-09-30 09:29:18 +02:00

ffmpeg_mux.h

fftools/ffmpeg_mux: Make ms_from_ost() inline

2025-05-15 23:08:05 +02:00

ffmpeg_opt.c

fftools/ffmpeg_opt: limit recursion of presets

2026-05-03 19:50:04 +02:00

ffmpeg_sched.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_sched.h

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

ffmpeg_utils.h

fftools/ffmpeg: propagate decoded_side_data from decoded streams to the filterchain

2025-01-25 21:56:49 -03:00

ffmpeg.c

fftools/ffmpeg: fix gracefully shutdown

2025-09-22 22:46:25 +02:00

ffmpeg.h

fftools/ffmpeg_opt: limit recursion of presets

2026-05-03 19:50:04 +02:00

ffplay_renderer.c

fftools/ffplay_renderer: Use new vulkan queue API

2025-06-20 20:39:15 +08:00

ffplay_renderer.h

fftools/ffplay: add hwaccel decoding support

2023-11-15 01:20:11 +08:00

ffplay.c

fftools/ffplay: fix crash when vk renderer is null

2024-11-06 16:34:02 +08:00

ffprobe.c

all: fix typos found by codespell

2025-08-03 13:48:47 +02:00

fftools.manifest

fftools: add DPI awareness manifest

2022-08-13 14:42:52 +02:00

fftoolsres.rc

fftools: add DPI awareness manifest

2022-08-13 14:42:52 +02:00

fopen_utf8.h

avutil/common: Don't auto-include mem.h

2024-03-31 00:08:43 +01:00

Makefile

fftools/Makefile: clean files from fftools/{graph,textformat}/

2025-06-03 01:07:15 +02:00

opt_common.c

Remove libpostproc

2025-05-07 15:35:47 +02:00

opt_common.h

fftools/cmdutils: hide some information listing options from basic help

2024-01-20 10:37:32 +01:00

sync_queue.c

fftools/sync_queue: switch from AVFifo+ObjPool to AVContainerFifo

2024-12-15 14:05:34 +01:00

sync_queue.h

fftools/sync_queue: add debug logging

2023-05-28 10:47:59 +02:00

thread_queue.c

fftools/thread_queue: switch from AVFifo+ObjPool to AVContainerFifo

2024-12-15 14:05:34 +01:00

thread_queue.h

fftools/thread_queue: switch from AVFifo+ObjPool to AVContainerFifo

2024-12-15 14:05:34 +01:00