[vlc-devel] [PATCH] url: fix vlc_UrlParse for smb/nfs/ftp/sftp

Rémi Denis-Courmont remi at remlab.net
Mon Dec 4 17:16:56 CET 2017


Le maanantaina 4. joulukuuta 2017, 16.52.17 EET Francois Cartegnie a écrit :
> Le 04/12/2017 à 16:22, Rémi Denis-Courmont a écrit :
> > Even filtering by protocol is problematic. For instance, an FTP URL can be
> > routed through an HTTP proxy, so must follow same rules. Also the generic
> > resolver function assume HTTP syntax.
> I still don't see what the requirement is since
> "HTTP proxies may receive requests for URIs not defined by RFC 1738"

I doubt that all popula HTTP proxies will handle a whitespace in the URL of 
the HTTP request line.

> we still need to parse/validate contextually, according to
> scheme/protocol reserved set, on use.

That sounds like a nightmare from security and stability point of view. I 
think that we have no reasonable ways to ascertain the expectations of each 
and every combination of scheme and use site, even less to maintain them as 
the code and underlying lirbaries evolve.

Regardless, I don't really see what you are hoping to achieve with scheme-
dependent parsing...
Is there any location for the affected schemes (FTP/S/ES, NFS, SFTP and SMB) 
that can be represented with the patch and cannot be represented in any way 
without the patch? It sure does not look like that to me. Likewise, it does 
not look like any URL that this patch accepts could not be fixed properly in 
vlc_uri_fixup() instead.

Of course, the parser and the resolver definitely wouldn´t work for VLC-custom 
capture device MRLs and the like. That was never intended to work either. 
Unfortunately, that means fixing or validating URLs systematically at input 
item level is impossible.

-- 
雷米‧德尼-库尔蒙
https://www.remlab.net/



More information about the vlc-devel mailing list