[FFmpeg-devel] [PATCH 2/2] avformat: add protocol_whitelist
george at nsup.org
Sun Jan 24 20:20:41 CET 2016
Le quintidi 5 pluviôse, an CCXXIV, Andreas Cadhalpun a écrit :
> The idea is to classify protocols as local (file, concat) or remote (http, tcp).
I am sorry, but this is completely broken. First, concat is not local.
Second, local/remote is not a relevant distinction for security.
Any design made with these assumptions at its code would be insecure.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: Digital signature
More information about the ffmpeg-devel