From aee0faef0a5b0b7442a008f485aeedc65708e8fe Mon Sep 17 00:00:00 2001 From: rfelker Date: Thu, 25 Sep 2003 00:36:04 +0000 Subject: [PATCH] simple fix for buffer overflow (remotely exploitable). feel free to commit a better fix if you don't like it. git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@10940 b3059339-0415-0410-9bf9-f77b7e298cf2 --- libmpdemux/asf_streaming.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libmpdemux/asf_streaming.c b/libmpdemux/asf_streaming.c index 8d3886d3b8..86e178ac33 100644 --- a/libmpdemux/asf_streaming.c +++ b/libmpdemux/asf_streaming.c @@ -502,11 +502,11 @@ asf_http_request(streaming_ctrl_t *streaming_ctrl) { return NULL; } http_set_uri( http_hdr, server_url->url ); - sprintf( str, "Host: %s:%d", server_url->hostname, server_url->port ); + sprintf( str, "Host: %.220s:%d", server_url->hostname, server_url->port ); url_free( server_url ); } else { http_set_uri( http_hdr, url->file ); - sprintf( str, "Host: %s:%d", url->hostname, url->port ); + sprintf( str, "Host: %.220s:%d", url->hostname, url->port ); } http_set_field( http_hdr, str );