[Live-devel] RTSP authentication with special characters

[Deanna Earley]

I believe this patch fixes the issue and percent decodes the username and password.
Technically, this should also be done to the host part (and the path components?)
https://tools.ietf.org/html/rfc3986#page-21

Any comments welcome.

-- 
Deanna Earley | Lead developer | icatchercctv

w: www.icode.co.uk/icatcher | t: 01329 835335 | f: 01329 835338
Registered Office : 71 The Hundred, Romsey, SO51 8BZ. Company Number : 03428325

> -----Original Message-----
> From: live-devel [mailto:live-devel-bounces at ns.live555.com] On Behalf Of
> Deanna Earley
> Sent: 05 March 2015 10:30
> To: 'live-devel at lists.live555.com'
> Subject: [Live-devel] RTSP authentication with special characters
> 
> Hello Ross.
> 
> The current liveMedia has a bug where it doesn't correctly handle
> "special" characters in the username and password strings when passed in
> the URL.
> 
> RFC 3986 (and predecessors) say that anything outside the "reserved" range
> can be percent encoded, but liveMedia isn't currently decoding these back
> to a normalised string.
> 
> Resending...
> Sending request: DESCRIBE rtsp://root:ab%40cd@10.1.20.1/axis-
> media/media.amp?videocodec=h264&streamprofile=Quality RTSP/1.0
> CSeq: 4
> Authorization: Basic cm9vdDphYiU0MGNk
> User-Agent: openRTSP (LIVE555 Streaming Media v2015.03.01)
> Accept: application/sdp
> 
> The authorisation string decodes to root:ab%40cd where it should decode to
> root:ab at cd (cm9vdDphYkBjZA==)
> 
> What are your thoughts on this?
> Is there a URL decoder function somewhere in the library that can be
> dropped in here?
> 
> Thanks
> 
> --
> Deanna Earley | Lead developer | icatchercctv
> 
> w: www.icode.co.uk/icatcher | t: 01329 835335 | f: 01329 835338
> Registered Office : 71 The Hundred, Romsey, SO51 8BZ. Company Number :
> 03428325
> 
> 
> _______________________________________________
> live-devel mailing list
> live-devel at lists.live555.com
> http://lists.live555.com/mailman/listinfo/live-devel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: auth decode.patch
Type: application/octet-stream
Size: 1784 bytes
Desc: auth decode.patch
URL: <http://lists.live555.com/pipermail/live-devel/attachments/20150305/9b7bb214/attachment.obj>