search for: format_vorbis_get_buff

...crash when trying to stream a title or artist with % in the name. The cause seems to be in stats.c, line 158 where the text is sent as a format string to vsnprintf. This could possibly be used for an exploit too. The solution I came up with is to call stats_event instead of stats_event_args from format_vorbis_get_buffer in format_vorbis.c. I've included a patch below. /Emil Index: format_vorbis.c =================================================================== RCS file: /usr/local/cvsroot/icecast/src/format_vorbis.c,v retrieving revision 1.6 diff -r1.6 format_vorbis.c 144,145c144,145 <...