From fe08c8f5c78bec4184bff2666ba7cf0846eae0d8 Mon Sep 17 00:00:00 2001 From: Thulinma Date: Thu, 12 Mar 2015 11:33:34 +0100 Subject: [PATCH] Deny loading of streamnames > 100 characters. --- lib/stream.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/stream.cpp b/lib/stream.cpp index 1300a0c7..d086c75b 100644 --- a/lib/stream.cpp +++ b/lib/stream.cpp @@ -71,6 +71,10 @@ void Util::sanitizeName(std::string & streamname) { /// Starts a process for a VoD stream. bool Util::startInput(std::string streamname, std::string filename, bool forkFirst) { + if (streamname.size() > 100){ + FAIL_MSG("Stream opening denied: %s is longer than 100 characters (%lu).", streamname.c_str(), streamname.size()); + return false; + } IPC::sharedPage mistConfOut("!mistConfig", DEFAULT_CONF_PAGE_SIZE); IPC::semaphore configLock("!mistConfLock", O_CREAT | O_RDWR, ACCESSPERMS, 1); configLock.wait();