[FFmpeg-devel] [PATCH 1/3] avformat/dashdec: Check whitelist

[Michael Niedermayer]

On Thu, Jan 16, 2025 at 04:39:49AM +0100, Michael Niedermayer wrote:
> Fixes: CVE-2023-6602, V. DASH Playlist SSRF
> 
> Found-by: Harvey Phillips of Amazon Element55 (element55)
> Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> ---
>  libavformat/dashdec.c | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)

will apply patch 1, ill wait a bit more for the others in case someone
wants to test

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Its not that you shouldnt use gotos but rather that you should write
readable code and code with gotos often but not always is less readable
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20250117/e89c30b0/attachment.sig>