From 935e8f852d050b4939f1d0f44b38e9b55a2fbe36 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Sebastian=20Dr=C3=B6ge?= Date: Wed, 30 Oct 2013 22:16:54 +0100 Subject: [PATCH] rtsp-session-pool: Make sure session IDs are properly URI-escaped https://bugzilla.gnome.org/show_bug.cgi?id=643812 --- gst/rtsp-server/rtsp-session-pool.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gst/rtsp-server/rtsp-session-pool.c b/gst/rtsp-server/rtsp-session-pool.c index d18c11c..be07820 100644 --- a/gst/rtsp-server/rtsp-session-pool.c +++ b/gst/rtsp-server/rtsp-session-pool.c @@ -293,7 +293,7 @@ gst_rtsp_session_pool_find (GstRTSPSessionPool * pool, const gchar * sessionid) static gchar * create_session_id (GstRTSPSessionPool * pool) { - gchar id[16]; + gchar id[17]; gint i; for (i = 0; i < 16; i++) { @@ -301,8 +301,9 @@ create_session_id (GstRTSPSessionPool * pool) session_id_charset[g_random_int_range (0, G_N_ELEMENTS (session_id_charset))]; } + id[16] = 0; - return g_strndup (id, 16); + return g_uri_escape_string (id, NULL, FALSE); } static GstRTSPSession * -- 2.7.4