[FFmpeg-devel] [PATCH v3] avformat/url: check url root node when rel include double dot

[Nicolas George]

Steven Liu (12020-04-27):
> /../../../../../other/url,  this is the absolute path, so just concat and don’t process,
> Or what do you want to say?

This is not an absolute path, since it contains "..". I think it is a
problem that the output of ff_make_absolute_url() is not, you know,
absolute.

It can even be considered a security issue, since other parts of the
code could assume that the output of ff_make_absolute_url() is actually
absolute.

Regards,

-- 
  Nicolas George
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20200427/63c0dc39/attachment.sig>