[MPlayer-DOCS] r36241 - trunk/DOCS/man/en/mplayer.1

reimar subversion at mplayerhq.hu
Sun May 5 19:02:35 CEST 2013


Author: reimar
Date: Sun May  5 19:02:35 2013
New Revision: 36241

Log:
manpage: document -playlist being unsafe in its option description

This really should have been added to the manpage at the start of the
previous decade. There's still bad advice about -playlist in the XML
docs, but I'll remove that later when purging more obsolete/wrong
stuff from there.

Patch by Uoti Urpala [uau mplayer2 org]

Modified:
   trunk/DOCS/man/en/mplayer.1

Modified: trunk/DOCS/man/en/mplayer.1
==============================================================================
--- trunk/DOCS/man/en/mplayer.1	Sun May  5 19:02:33 2013	(r36240)
+++ trunk/DOCS/man/en/mplayer.1	Sun May  5 19:02:35 2013	(r36241)
@@ -1283,6 +1283,15 @@ Expand TEXT only if the property NAME is
 Play files according to a playlist file (ASX, Winamp, SMIL, or
 one-file-per-line format).
 .br
+.I WARNING:
+The way MPlayer parses and uses playlist files is not safe against
+maliciously constructed files.
+Such files may trigger harmful actions.
+This has been the case for all MPlayer versions, but unfortunately this
+fact was not well documented earlier, and some people have even misguidedly
+recommended use of -playlist with untrusted sources.
+Do NOT use -playlist with random internet sources or files you don't trust!
+.br
 .I NOTE:
 This option is considered an entry so options found after it will apply
 only to the elements of this playlist.


More information about the MPlayer-DOCS mailing list