From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 1A2AA402C8 for ; Mon, 19 Dec 2022 02:49:16 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 1A49168BA11; Mon, 19 Dec 2022 04:49:14 +0200 (EET) Received: from szxga01-in.huawei.com (szxga01-in.huawei.com [45.249.212.187]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 06988689BEF for ; Mon, 19 Dec 2022 04:49:06 +0200 (EET) Received: from kwepemi500011.china.huawei.com (unknown [172.30.72.54]) by szxga01-in.huawei.com (SkyGuard) with ESMTP id 4Nb3vZ0tjbzqT9J for ; Mon, 19 Dec 2022 10:44:42 +0800 (CST) Received: from kwepemi500014.china.huawei.com (7.221.188.232) by kwepemi500011.china.huawei.com (7.221.188.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.34; Mon, 19 Dec 2022 10:49:04 +0800 Received: from kwepemi500014.china.huawei.com ([7.221.188.232]) by kwepemi500014.china.huawei.com ([7.221.188.232]) with mapi id 15.01.2375.034; Mon, 19 Dec 2022 10:49:04 +0800 From: "Wujian(Chin)" To: FFmpeg development discussions and patches Thread-Topic: [FFmpeg-devel] [PATCH] fftools/ffmpeg_ffplay_ffprobe_cmdutils: add -safe to replace the user name and password in the protocol address Thread-Index: AdkR6kCaPiIZsC5wR7GatfIhHllSDQATMKWAAEbnbhA= Date: Mon, 19 Dec 2022 02:49:03 +0000 Message-ID: <4c18422fcd834f68ac80c9ee7761f363@huawei.com> References: <1f01a2a041ba4e809ec8d9175fde8d8e@huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.102.143] MIME-Version: 1.0 X-CFilter-Loop: Reflected Subject: [FFmpeg-devel] =?gb2312?b?tPC4tDogIFtQQVRDSF0gZmZ0b29scy9mZm1w?= =?gb2312?b?ZWdfZmZwbGF5X2ZmcHJvYmVfY21kdXRpbHM6IGFkZCAtc2FmZSB0byByZXBs?= =?gb2312?b?YWNlIHRoZSB1c2VyIG5hbWUgYW5kIHBhc3N3b3JkIGluIHRoZSBwcm90b2Nv?= =?gb2312?b?bCBhZGRyZXNz?= X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: >Am Sa., 17. Dez. 2022 um 08:36 Uhr schrieb Wujian(Chin) : >> >> The Protocol address may contain the user name and password. The ps -ef command may expose the plaintext. >Please add a sentence explaining why this is an issue. Other users can run the ps -ef command to view sensitive information such as the user name and password in the URL, which is insecure. >> The -safe parameter option is added to replace the user name and password in the command line with the asterisk (*). >> >> Signed-off-by: wujian_nanjing >> --- >> doc/ffmpeg.texi | 7 +++++++ >> doc/ffplay.texi | 8 ++++++++ >> doc/ffprobe.texi | 7 +++++++ >> fftools/cmdutils.c | 47 >> +++++++++++++++++++++++++++++++++++++++++++---- >> fftools/cmdutils.h | 15 +++++++++++++++ >> fftools/ffmpeg.c | 16 +++++++++++++--- >> fftools/ffplay.c | 15 +++++++++++++-- >> fftools/ffprobe.c | 18 ++++++++++++++---- >> 8 files changed, 120 insertions(+), 13 deletions(-) >> >> diff --git a/doc/ffmpeg.texi b/doc/ffmpeg.texi index 0367930..e905542 >> 100644 >> --- a/doc/ffmpeg.texi >> +++ b/doc/ffmpeg.texi >> @@ -50,6 +50,13 @@ output files. Also do not mix options which belong >> to different files. All options apply ONLY to the next input or output file and are reset between files. >> >> @itemize >> +@item -safe >> +The Protocol address may contain the user name and password. The ps -ef command may expose the plaintext. >> +The -safe parameter option is added to replace the user name and password in the command line with the asterisk (*). >> +@example >> +ffmpeg -safe -i rtsp://username@password.xxxx.com >I believe this should be example.com >Carl Eugen ffmpeg -i rtsp://username:password@url test.mp4 eg:ffmpeg -i rtsp://jack:WSX2344we@10.0.0.1:8554/stream/testqwee test.mp4 The user name and password are used for interaction with the video source server. I'll modify the document description later. Carl Eugen, thanks for your question. _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".