<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Apr 13, 2020 at 11:43 AM Paul B Mahol <<a href="mailto:onemda@gmail.com">onemda@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 4/13/20, Richard Lince <richard.lince@bluebox.video> wrote:<br>
> Hi all,<br>
><br>
> I've done a little more digging with a bug which I believe must be quite<br>
> common, string parsing at "av_url_split" for authentication extraction.<br>
> The issue exists in v4.2.2.<br>
><br>
> line 4817 - libavformat/utils.c<br>
> <<a href="https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649" rel="noreferrer" target="_blank">https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649</a>><br>
><br>
> ls = p + strcspn(p, "/?#");<br>
><br>
> This does not permit  passwords or user names with the characters:<br>
> "/?#"<br>
><br>
> Can anyone confirm this to be the case or not please.<br></blockquote><div><br></div><div>I believe you are expected to URL-encode special characters anywhere in the URL. See, e.g., the page <a href="https://support.brightcove.com/special-characters-usernames-and-passwords">https://support.brightcove.com/special-characters-usernames-and-passwords</a></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
><br>
> example:<br>
> "rtsp://admin:bob#<a href="http://bob@192.168.0.1:544/27f255e7-07be-38b7-83a3-fec9072713de" rel="noreferrer" target="_blank">bob@192.168.0.1:544/27f255e7-07be-38b7-83a3-fec9072713de</a>"<br>
><br>
> last commit (however always perhaps broken)<br>
> <a href="https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649" rel="noreferrer" target="_blank">https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649</a><br>
<br>
Please try latest ffmpeg build version.<br>
<br>
<br>
><br>
> Cheers.<br>
> Rich.<br>
><br>
> On 08/04/2020 16:42, Richard Lince wrote:<br>
>> Hi,<br>
>> I'm looking at a way to use a base64 digest string as input into the<br>
>> "avformat_open_input" call for the credentials portion.<br>
>> Sure that you would normally use:<br>
>> rtsp://<a href="http://user:pass@192.168.0.30/live/ch00_0" rel="noreferrer" target="_blank">user:pass@192.168.0.30/live/ch00_0</a><br>
>> format as an example, however, this format does not account for<br>
>> invalid characters that are valid password characters, examples:<br>
>> @password<br>
>> password/\""<br>
>> password/""password/""<br>
>> password""password""<br>
>><br>
>> Perhaps a method exists that I'm unaware of, any ideas welcome.<br>
>> Cheers,<br>
>> Rich.<br>
>> logo<br>
>><br>
>> _______________________________________________<br>
>> Libav-user mailing list<br>
>> <a href="mailto:Libav-user@ffmpeg.org" target="_blank">Libav-user@ffmpeg.org</a><br>
>> <a href="https://ffmpeg.org/mailman/listinfo/libav-user" rel="noreferrer" target="_blank">https://ffmpeg.org/mailman/listinfo/libav-user</a><br>
>><br>
>> To unsubscribe, visit link above, or email<br>
>> <a href="mailto:libav-user-request@ffmpeg.org" target="_blank">libav-user-request@ffmpeg.org</a> with subject "unsubscribe".<br>
><br>
> Best Regards,<br>
> Richard Lince,<br>
> Owner and Founder<br>
><br>
> bluebox.video <<a href="https://www.bluebox.video" rel="noreferrer" target="_blank">https://www.bluebox.video</a>><br>
> +44(0)7841665146<br>
> Skype: richard.lince77<br>
><br>
> logo<br>
><br>
_______________________________________________<br>
Libav-user mailing list<br>
<a href="mailto:Libav-user@ffmpeg.org" target="_blank">Libav-user@ffmpeg.org</a><br>
<a href="https://ffmpeg.org/mailman/listinfo/libav-user" rel="noreferrer" target="_blank">https://ffmpeg.org/mailman/listinfo/libav-user</a><br>
<br>
To unsubscribe, visit link above, or email<br>
<a href="mailto:libav-user-request@ffmpeg.org" target="_blank">libav-user-request@ffmpeg.org</a> with subject "unsubscribe".</blockquote></div></div>