[vlc-devel] Why is VLM using stream_UrlNew?
rdenis at simphalempin.com
Mon May 12 18:57:43 CEST 2008
VLM is currently using VLC stream_* to read the configuration file. I, hmm,
wonder if there is really a use case for reading a VLM script anywhere but
from the filesystem.
This is normally not a security problem per se. Users can simply not
run "vlc --vlm-conf http://www.haxors.com/". Still, it does not seem like a
terrible idea to me.
I would propose replacing stream_* with regular <stdio.h> FILE functions,
unless someone has a real use case for this (mis?)feature.
More information about the vlc-devel