[vlc-devel] Why is VLM using stream_UrlNew?

Rémi Denis-Courmont rdenis at simphalempin.com
Mon May 12 18:57:43 CEST 2008


VLM is currently using VLC stream_* to read the configuration file. I, hmm, 
wonder if there is really a use case for reading a VLM script anywhere but 
from the filesystem.

This is normally not a security problem per se. Users can simply not 
run "vlc --vlm-conf http://www.haxors.com/". Still, it does not seem like a 
terrible idea to me.

I would propose replacing stream_* with regular <stdio.h> FILE functions, 
unless someone has a real use case for this (mis?)feature.


Rémi Denis-Courmont

More information about the vlc-devel mailing list