You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Filippo Valsorda 4d318be195 [update] fix (unexploitable) BB'06 vulnerability in rsa_verify
The rsa_verify code was vulnerable to a BB'06 attack, allowing to forge
signatures for arbitrary messages if and only if the public key exponent is
3.  Since the updates key is hardcoded to 65537, there is no risk for
youtube-dl, but I don't want vulnerable code in the wild.

The new function adopts a way safer approach of encoding-and-comparing to
replace the dangerous parsing code.
8 years ago
..
downloader [downloader/hls] Ask ffmpeg to quit when interrupting youtube-dl with 'Ctrl+C' (#8252) 8 years ago
extractor [iqiyi] Update key (closes #8292) 8 years ago
postprocessor [FFmpegPostProcessor] Default of prefer ffmpeg 9 years ago
YoutubeDL.py [YoutubeDL] Ensure protocol is always present 8 years ago
__init__.py Using internal opener 9 years ago
__main__.py Use `insert` for all sys.path manipulations 9 years ago
aes.py [aes] Fix for python 3.2 9 years ago
cache.py [cache] Fix writing to paths with unicode characters 10 years ago
compat.py [compat] Clarify the versions requiring compat_kwargs 8 years ago
jsinterp.py [jsinterp] Extend function regex (Closes #7900, closes #7901) 8 years ago
options.py [options] Prefer --convert-subs spelling 8 years ago
swfinterp.py Fix typos 8 years ago
update.py [update] fix (unexploitable) BB'06 vulnerability in rsa_verify 8 years ago
utils.py Revert "fix typos" 8 years ago
version.py release 2016.01.15 8 years ago