<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<font size="-1"><font face="Helvetica, Arial, sans-serif">Hi all,<br>
<br>
I've done a little more digging with a bug which I believe must
be quite common, string parsing at "av_url_split" for
authentication extraction.<br>
The issue exists in v4.2.2.<br>
<br>
line 4817 - </font></font><font size="-1"><font
face="Helvetica, Arial, sans-serif"><a
title="libavformat/utils.c" class="link-gray-dark"
href="https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649">libavformat/utils.c</a><br>
<br>
ls = p + strcspn(p, "/?#");<br>
<br>
</font></font>This does not permit passwords or user names with
the characters: <font size="-1"><font face="Helvetica, Arial,
sans-serif"><br>
"/?#"</font></font><br>
<br>
Can anyone confirm this to be the case or not please.<br>
<br>
example:<br>
<a class="moz-txt-link-rfc2396E" href="mailto:rtsp://admin:bob#bob@192.168.0.1:544/27f255e7-07be-38b7-83a3-fec9072713de">"rtsp://admin:bob#bob@192.168.0.1:544/27f255e7-07be-38b7-83a3-fec9072713de"</a><br>
<br>
last commit (however always perhaps broken)<br>
<a class="moz-txt-link-freetext" href="https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649">https://github.com/FFmpeg/FFmpeg/commit/554576b6cfe79a91d37e14d3617ca417562085db#diff-b45fad75a4dfb82ef50e978d38dc2649</a><br>
<br>
Cheers.<br>
Rich.<br>
<br>
<div class="moz-cite-prefix">On 08/04/2020 16:42, Richard Lince
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:c56ab5a2-b9ca-1b34-a29c-b28a25b99eb0@bluebox.video">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
Hi,<br>
I'm looking at a way to use a base64 digest string as input into
the <font size="-1"><font face="Helvetica, Arial, sans-serif">"avformat_open_input"
call for the credentials portion.<br>
Sure that you would normally use:<br>
<a class="moz-txt-link-abbreviated"
href="mailto:rtsp://user:pass@192.168.0.30/live/ch00_0"
moz-do-not-send="true">rtsp://user:pass@192.168.0.30/live/ch00_0</a><br>
format as an example, however, this format does not account
for invalid characters that are valid password characters,
examples:<br>
@password<br>
</font></font><font size="-1"><font face="Helvetica, Arial,
sans-serif"><font size="-1"><font face="Helvetica, Arial,
sans-serif">password</font></font>/\""<br>
</font></font><font size="-1"><font face="Helvetica, Arial,
sans-serif">password</font></font>/""<font size="-1"><font
face="Helvetica, Arial, sans-serif">password</font></font>/""<br>
<font size="-1"><font face="Helvetica, Arial, sans-serif">password</font></font>""<font
size="-1"><font face="Helvetica, Arial, sans-serif">password</font></font>""<br>
<br>
Perhaps a method exists that I'm unaware of, any ideas welcome.<br>
Cheers,<br>
Rich.<br>
<div class="moz-signature"> <img alt="logo"
src="file:///C:/Users/Swift Canyon/Google
Drive/BlueBox/Images/logoEmail.png" moz-do-not-send="true"></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Libav-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Libav-user@ffmpeg.org">Libav-user@ffmpeg.org</a>
<a class="moz-txt-link-freetext" href="https://ffmpeg.org/mailman/listinfo/libav-user">https://ffmpeg.org/mailman/listinfo/libav-user</a>
To unsubscribe, visit link above, or email
<a class="moz-txt-link-abbreviated" href="mailto:libav-user-request@ffmpeg.org">libav-user-request@ffmpeg.org</a> with subject "unsubscribe".</pre>
</blockquote>
<br>
<div class="moz-signature"><font size="2" face="calibri"
color="black">
Best Regards,<br>
Richard Lince,<br>
Owner and Founder<br>
<br>
<a href="https://www.bluebox.video">bluebox.video</a> <br>
+44(0)7841665146<br>
Skype: richard.lince77<br>
</font><br>
<img alt="logo" src="file:///C:/Users/Swift Canyon/Google
Drive/BlueBox/Images/logoEmail.png"></div>
</body>
</html>