[FFmpeg-devel] [PATCH] attachments support in matroska demuxer

[Uoti Urpala]

On Wed, 2008-01-02 at 12:24 +0100, Michael Niedermayer wrote:
> Right way (for ASS/SSA mkv) would have been IMHO, like codecs.
> 
> File uses font foobar, if available fine, if not warn the user that a
> font is missing and she should find and install it for optimal display.
> (that find&install could have been automatic on network connected point
> and click OSs)

Completely impractical.

> Also dont forget that embeding ttf fonts (which is i think what is done)
> opens you up to all exploits in the ttf rendering lib. Downloading them
> from a trusted source seperately reduces the risk significantly.

There's no trusted source which would have all fonts (some of which are
custom made). Pdf files can have embedded fonts so most people are
already exposed to whatever exploits are possible against the font
rendering library. The video libraries are likely to be an easier target
for attack anyway.