[MPlayer-dev-eng] [PATCH] Do not read codecs.conf files by default

[Diego Biurrun]

On Mon, Jan 15, 2007 at 11:01:34PM +0100, Reimar Döffinger wrote:
> On Mon, Jan 15, 2007 at 08:03:33PM +0100, Diego Biurrun wrote:
> > IMO dynamic codecs.conf loading should be an optional,
> > disabled-by-default feature that devs can compile-in if they want.
> 
> Going that far, as Michael pointed out, would be a bad idea, among the
> reasons security considerations.

I'd call this esoteric at best.  If you can edit codecs.conf to try to
avoid security problems you might as well recompile or avoid the
problematic media.

> A possible consideration would be to change codecs.conf in the sources
> so that it would not load without manual modification by the user,
> a I-know-what-I-am-doing similar to the lavf bframes thing...

That's precisely what my patch does :)  It forces the user to provide a
command line option (or config file entry) if a codecs.conf file is to
be loaded, otherwise it is not loaded...

Diego