oysteikt
/
mpd
0
0
Fork 0
Code Issues Pull Requests Releases Activity
music player daemon (fork)
17,004 Commits 1 Branch 144 Tags 56 MiB
C++ 94.4%
Meson 2.8%
Python 1.4%
Java 0.6%
Kotlin 0.5%
Other 0.2%
Go to file
Max Kellermann eaecbcafb2 PlaylistFile: disallow backslash in playlist names on Windows 
The function spl_valid_name() should verify playlist names and prevent
path traversal, but it failed to do so on Windows, because it forgot
to check for backslashes.

This buggy piece of code was already present when stored playlists
were initially implemented in 2006 by commit 08003904d7, and
even during the many rounds of code refactoring, nobody ever bothered
to verify it.  D'oh!

(Thanks, Paul Arzelier)
 		2022-11-28 09:53:49 +01:00
.github .github/workflows/build.yml: build everything, not just unit tests (Linux) 2022-05-23 21:32:42 +02:00
android increment version number to 0.23.11 2022-10-20 19:09:03 +02:00
build build/pkg-config.sh: add comment 2019-02-22 12:39:59 +01:00
doc doc/index.rst: added man pages links to suppress warnings: document isn't included in any toctree 2022-11-08 14:32:40 +01:00
python/build python/build/meson.py: use "meson setup" instead of the deprecated syntax 2022-11-12 12:10:06 +01:00
src PlaylistFile: disallow backslash in playlist names on Windows 2022-11-28 09:53:49 +01:00
subprojects subprojects: update fmt to 9.1.0 2022-11-11 19:22:39 +01:00
systemd Revert "systemd: add "RuntimeDirectory" directive" 2021-11-11 10:16:13 +01:00
test test/meson.build: reduce test_translate_song. dependencies 2022-11-12 12:17:35 +01:00
win32 {android,win32}/build.py: make stdout/stderr unbuffered 2022-08-08 23:48:23 +02:00
.clang-format Add .clang-format 2020-05-27 18:58:55 +08:00
.gitignore .gitignore: add emacs lsp-mode files 2020-05-26 21:07:56 +02:00
.travis.yml meson.build: libfmt integration 2021-05-25 15:48:49 +02:00
AUTHORS copyright year 2021 2021-01-01 19:54:28 +01:00
COPYING Update the text of the GPLv2, this fixes the address and a few other oddities. 2008-12-20 19:02:09 -08:00
NEWS PlaylistFile: disallow backslash in playlist names on Windows 2022-11-28 09:53:49 +01:00
README.md doc, README.md: update IRC server name/URL 2021-06-23 15:48:42 +02:00
meson.build storage/meson.build: move StorageState.cxx to "mpd" executable 2022-11-12 12:24:48 +01:00
meson_options.txt Merge branch 'v0.22.x' 2021-08-05 15:17:07 +02:00
mpd.svg import MPD SVG icon 2014-07-14 19:04:46 +02:00
valgrind.suppressions valgrind.suppressions: add GObject/libgcrypt/libsmbclient suppressions 2019-02-05 22:53:02 +01:00

README.md

Music Player Daemon

http://www.musicpd.org

A daemon for playing music of various formats. Music is played through the server's audio device. The daemon stores info about all available music, and this info can be easily searched and retrieved. Player control, info retrieval, and playlist management can all be managed remotely.

For basic installation instructions read the manual.

Users

Developers

Legal

MPD is released under the GNU General Public License version 2, which is distributed in the COPYING file.