[vlc-devel] vlc: svn commit r24345 (damienf)

Christophe Massiot massiot at via.ecp.fr
Fri Jan 18 17:37:21 CET 2008


On Thu, Jan 17, 2008, Rémi Denis-Courmont wrote:

> No, what I am pointing out, is that nobody will ever review the whole sets of 
> options properly, and the only way to achieve some level of security is to 
> disable everything, except for options that have EXPLICITLY been considered.

+1

> We surely have many exploitable bugs in the various parsers. I fail to see why 
> we should ignore known or very likely problems just because we will be 
> missing others.

+2

-- 
Christophe Massiot.



More information about the vlc-devel mailing list