[MPlayer-dev-eng] [RFC] check for correct calloc

[Rich Felker]

On Fri, Sep 14, 2007 at 12:58:02AM +0200, Balatoni Denes wrote:
> > Either way, you misunderstood this, if the libc is working MPlayer might
> > segfault, if it does not then it will be a heap overflow.
> > And the point is to make people aware that they have a broken libc (and
> > there are more than glibc and other equally well supported versions).
> 
> I think what I said still stands. I mean, mplayer could even check the package 
> repository of the distribution if there are any security fixes, download 
> them, install them etc. - just kidding, but the point is it's not mplayer's 
> job. It's the job of the security concious user - or if he is not security 
> councious we don't need to bother either.

I agree. It's not our job to hunt for bugs that were fixed by clueful
implementors 10-15 years ago and by our less-clueful GNU and MS
friends 5 years ago...

Rich