[Bf-committers] Security Fix

[Philipp Gühring]

Hello,

The previous patch solved only half of the problem (only affected the still 
images, not the movies).

> Although it's not the most elegant of all solutions, I can imagine this
> solves issues for now. More users have requested commandline access to
> enforce the output file name.

If anyone finds a compatible and more elegant solution, I don´t have anything 
against it.

> I'd appreciate if you include comments at the global var, where it's
> exported to and/or comes from... we've just got too many globals
> already. :)

Ok. Done.

> The patch also comes in with linebreaks in the mail... dunno if the
> 'patch' unix command handles that correct? I'm always very hesitant
> just applying patches to my code.

Ok, please try it that way:

http://www2.futureware.at/~philipp/security.patch

Just tell me if there are still any problems.

Many greetings,
Philipp Gühring
Futureware