[FFmpeg-devel] [PATCH 3/3] avformat: add youtube-dl based demuxer

Gilles Chanteperdrix gilles.chanteperdrix at xenomai.org
Wed Apr 8 19:48:42 CEST 2015


On Wed, Apr 08, 2015 at 07:30:48PM +0200, Hendrik Leppkes wrote:
> On Wed, Apr 8, 2015 at 7:27 PM, Gilles Chanteperdrix
> <gilles.chanteperdrix at xenomai.org> wrote:
> >
> >> Nice security hole.
> >
> > how is that ? I do not see any buffer overflow possible.
> >
> 
> Executing a command with system() is very unsafe.

Indeed, never thought of that. With exec this problem does not
exist, we get to choose how the arguments are split.

-- 
					    Gilles.


More information about the ffmpeg-devel mailing list