I have just installed a new version (2021.03.16) of the “LIVE555 Streaming Media” code that fixes the bug (a potential security vulnerability) that Zhao Jiaxu reported yesterday.
If your code implements a RTSP server that uses one or more of the following "OnDemandServerMediaSubsession” subclasses: AC3AudioFileServerMediaSubsession ADTSAudioFileServerMediaSubsession AMRAudioFileServerMediaSubsession then you should upgrade to the latest version of the code ASAP. (This includes the “testOnDemandRTSPServer” demo application. Note, however, that the "DynamicRTSPServer" code used by the "LIVE555 Media Server" is not vulnerable to this bug.) Ross Finlayson Live Networks, Inc. http://www.live555.com/ _______________________________________________ live-devel mailing list live-devel@lists.live555.com http://lists.live555.com/mailman/listinfo/live-devel