[vlc-devel] Why is VLM using stream_UrlNew?

[Rémi Denis-Courmont]

Le Monday 12 May 2008 20:44:19 Vytautas Stankevičius, vous avez écrit :
> On 2008 m. May 12 d., Monday 20:33:22 Jean-Paul Saman wrote:
> > Rémi Denis-Courmont wrote:
> > > 	Hello,
> > >
> > > VLM is currently using VLC stream_* to read the configuration file. I,
> > > hmm, wonder if there is really a use case for reading a VLM script
> > > anywhere but from the filesystem.
> > >
> > > This is normally not a security problem per se. Users can simply not
> > > run "vlc --vlm-conf http://www.haxors.com/". Still, it does not seem
> > > like a terrible idea to me.
> > >
> > > I would propose replacing stream_* with regular <stdio.h> FILE
> > > functions, unless someone has a real use case for this (mis?)feature.
> > >
> > > Regards,
> >
> > no objection here.
>
> What about SMB ?

Yeah, what about it? You can mount it in the VFS anyway, in the case you want 
to parse VLM from a file sharing server.

-- 
Rémi Denis-Courmont
http://www.remlab.net/