1
0
mirror of https://gitlab.xiph.org/xiph/icecast-server.git synced 2024-06-16 06:15:24 +00:00
icecast-server/src
Philipp Schafft 27abfbbd68 Fix: Do not crash URL Auth is used with stream_auth and no credentials are given
This fixes a crash (NULL reference) in case URL Auth is used
and stream_auth is trigged with no credentials passed by the client.
Username and password is now set to empty strings and transmited to
the backend server this way.

See #2191 for more details and to keep track of the problem.

Closes: #2191, DEB#782120
2015-04-08 09:09:26 +00:00
..
avl Replaced usage of sprintf() with snprintf(). Also exported size of key printer's buffer in avl/. 2013-01-16 12:02:14 +00:00
httpp fixing some compiler warnings 2014-11-07 23:14:00 +00:00
log corrected logic checking argument. Thanks to David Binderman for reporting 2013-07-04 12:31:17 +00:00
net fixing some compiler warnings 2014-11-07 23:14:29 +00:00
thread Add handlers for spinlocks if available, map to mutexes when not. 2009-01-09 03:18:03 +00:00
timing minor cleanups. 2009-07-07 16:37:31 +00:00
admin.c patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 2014-11-10 10:46:55 +00:00
admin.h const updates, no functional changes 2007-08-16 22:49:13 +00:00
auth_htpasswd.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
auth_htpasswd.h fix bug #1141 2007-08-23 16:58:18 +00:00
auth_url.c Fix: Do not crash URL Auth is used with stream_auth and no credentials are given 2015-04-08 09:09:26 +00:00
auth_url.h return type was wrong, although it probably won't affect stability 2007-10-24 22:40:42 +00:00
auth.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
auth.h Allow source client authentication via auth handler. Here the URL handler can 2009-01-14 01:18:22 +00:00
cfgfile.c Once more updated string, same Qualys results. 2014-11-09 10:55:29 +00:00
cfgfile.h updated some copyright headers 2014-11-07 22:06:06 +00:00
client.c patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 2014-11-10 10:46:55 +00:00
client.h patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 2014-11-10 10:46:55 +00:00
compat.h win32 updates. cleanup of the start and finish of the gui and service 2009-08-05 22:32:47 +00:00
configtest.c Add Copyright notice to each source file, as requested by debian. 2004-01-29 01:02:12 +00:00
connection.c Applying patch, HTTP PUT requires content-type 2014-11-08 16:23:26 +00:00
connection.h Allow source client authentication via auth handler. Here the URL handler can 2009-01-14 01:18:22 +00:00
event.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
event.h Add Copyright notice to each source file, as requested by debian. 2004-01-29 01:02:12 +00:00
format_ebml.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_ebml.h Clarify that only these specific files are GPLv2 or v3. 2012-05-24 18:32:06 +00:00
format_flac.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_flac.h Add more Ogg codec handlers, there has not been that much testing on these 2005-05-07 11:01:35 +00:00
format_kate.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_kate.h Add Kate and Skeleton codecs to ogg handler. patch by ogg.k.ogg.k 2008-04-19 02:11:37 +00:00
format_midi.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_midi.h Add more Ogg codec handlers, there has not been that much testing on these 2005-05-07 11:01:35 +00:00
format_mp3.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_mp3.h explicitly flag up a metadata update after they have been set. Could of led to 2009-01-15 03:38:49 +00:00
format_ogg.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_ogg.h merge extra checks. minor cleanup work 2005-08-07 14:50:59 +00:00
format_opus.c fixing some compiler warnings 2014-11-07 23:10:43 +00:00
format_opus.h Clarify that only these specific files are GPLv2 or v3. 2012-05-24 18:32:06 +00:00
format_skeleton.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_skeleton.h Add Kate and Skeleton codecs to ogg handler. patch by ogg.k.ogg.k 2008-04-19 02:11:37 +00:00
format_speex.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_speex.h Add more Ogg codec handlers, there has not been that much testing on these 2005-05-07 11:01:35 +00:00
format_theora.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_theora.h merge multi ogg codec handling. Handle theora and/or vorbis. Place new 2004-12-07 21:06:26 +00:00
format_vorbis.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
format_vorbis.h merge multi ogg codec handling. Handle theora and/or vorbis. Place new 2004-12-07 21:06:26 +00:00
format.c patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 2014-11-10 10:46:55 +00:00
format.h Add David Richard's webm support patch. 2012-05-18 17:33:17 +00:00
fserve.c patch to fix regression on header size with large headers introduced by support of <server-id> and <http-headers>. This should ensure we have at least space for 2kB of extra headers. Depending on function and call we may have much more space. 2014-11-10 10:46:55 +00:00
fserve.h Allow rereading of the mime types file on xml reload. Also allow for specifying 2007-08-13 21:33:27 +00:00
global.c Don't impose a limit on the number of listening sockets allowed in the xml 2007-10-16 01:53:06 +00:00
global.h rename ICE_LISTEN_QUEUE, ICE_RUNNING and ICE_HALTING so they have a prefix of ICECAST_ 2014-10-31 09:00:45 +00:00
logging.c Fixed regression introduced in r18356 (CVE-2011-4612): client duration time is now correctly logged. PRIu64 MUST NOT be used with log_write_direct() as depending on platform PRIu64 may be using something not supported by __vsnprintf() of log/log.c. close #2081, see r18356 2014-11-08 13:34:45 +00:00
logging.h LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
main.c updated some copyright headers 2014-11-07 22:06:06 +00:00
Makefile.am Add WebM support. 2012-06-13 21:24:23 +00:00
md5.c minor cleanups 2004-11-20 02:16:59 +00:00
md5.h minor cleanups 2004-11-20 02:16:59 +00:00
refbuf.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
refbuf.h type cleanups. reduces memory usage on 64bit, no difference on 32bit. closes #780 2007-12-15 17:02:16 +00:00
sighandler.c rename ICE_LISTEN_QUEUE, ICE_RUNNING and ICE_HALTING so they have a prefix of ICECAST_ 2014-10-31 09:00:45 +00:00
sighandler.h cleanup unused var schedule_config_reread. 2012-11-13 11:25:46 +00:00
slave.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
slave.h add optional bind setting to relays 2009-03-17 01:45:41 +00:00
source.c Set PATH_MAX to 4096 if not defined (patch by Svante Signell <svante.signell@gmail.com>) 2014-11-19 11:30:58 +00:00
source.h race condition patch as submitted by lds and remi, slightly motified by me. closes #1810 2012-07-17 14:03:37 +00:00
stats.c make use of sizeof() not explicit magic numbers 2014-11-08 12:28:17 +00:00
stats.h Adding stream_start_iso8601, server_start_iso8601 2014-05-04 07:14:54 +00:00
TODO added new lion at end of file so it does not mess up my console. 2012-07-17 14:50:44 +00:00
util.c Fix: Let util_url_escape() handle NULL parameter. 2015-04-08 09:02:20 +00:00
util.h updated some copyright headers 2014-11-07 22:06:06 +00:00
xslt.c Move declarations to begin of block 2014-11-18 17:43:34 +00:00
xslt.h Patch from gtgbr@gmx.net to fix (void) function prototypes, with some minor 2005-12-17 12:23:09 +00:00
yp.c LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00
yp.h LOG_{ERROR|WARN|INFO|DEBUG}() -> ICECAST_LOG_{ERROR|WARN|INFO|DEBUG}(); this is to avoid collision with LOG_INFO that is defined as part of syslog. 2014-10-31 08:46:58 +00:00