From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:38895)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1ejJiB-00065u-Ux
	for guix-patches@gnu.org; Wed, 07 Feb 2018 02:00:17 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1ejJi7-0002dh-48
	for guix-patches@gnu.org; Wed, 07 Feb 2018 02:00:08 -0500
Received: from debbugs.gnu.org ([208.118.235.43]:52925)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1ejJi7-0002dU-1A
	for guix-patches@gnu.org; Wed, 07 Feb 2018 02:00:03 -0500
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1ejJi6-0002XE-Jf
	for guix-patches@gnu.org; Wed, 07 Feb 2018 02:00:02 -0500
Subject: [bug#30378] [PATCH] gnu: mpv: Fix CVE-2018-6360.
References: <87tvuts33b.fsf@gmail.com>
In-Reply-To: <87tvuts33b.fsf@gmail.com>
Resent-Message-ID: <handler.30378.B30378.15179867749679@debbugs.gnu.org>
From: Alex Vong <alexvong1995@gmail.com>
Date: Wed, 07 Feb 2018 14:59:24 +0800
Message-ID: <87po5hs2sz.fsf@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-patches/>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org
Sender: "Guix-patches" <guix-patches-bounces+kyle=kyleam.com@gnu.org>
To: 30378@debbugs.gnu.org

BTW, I forget to mention that I remove hunk #4 from the first patch
since it checks if 'mpd_url' is safe, but the feature of 'mpd_url' is
not available in the 0.28.0 release yet. So I think it should be fine.