From 77b618ca777473ec03fecffb0ecc7b0258d7396f Mon Sep 17 00:00:00 2001 From: =?utf8?q?Sebastian=20Dr=C3=B6ge?= Date: Fri, 10 Jul 2015 13:19:40 +0300 Subject: [PATCH] mpdparser: Don't allow network access when reading the XML data --- ext/dash/gstmpdparser.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ext/dash/gstmpdparser.c b/ext/dash/gstmpdparser.c index c46240f..00d2a8b 100644 --- a/ext/dash/gstmpdparser.c +++ b/ext/dash/gstmpdparser.c @@ -2982,9 +2982,10 @@ gst_mpd_parse (GstMpdClient * client, const gchar * data, gint size) * between the version it was compiled for and the actual shared * library used */ - LIBXML_TEST_VERSION - /* parse "data" into a document (which is a libxml2 tree structure xmlDoc) */ - doc = xmlReadMemory (data, size, "noname.xml", NULL, 0); + LIBXML_TEST_VERSION; + + /* parse "data" into a document (which is a libxml2 tree structure xmlDoc) */ + doc = xmlReadMemory (data, size, "noname.xml", NULL, XML_PARSE_NONET); if (doc == NULL) { GST_ERROR ("failed to parse the MPD file"); return FALSE; -- 2.7.4