[vlc-devel] [VLC] #2468: VLC 0.9.8a crahes when opening a mpeg2-file with .mod-extension.

[Rémi Denis-Courmont]

On Sun, 1 Feb 2009 01:07:58 +0200, Pasi Sjöholm <tigeli at gmail.com> wrote:
> It's does not matter is it a libmodplug bug or not, VLC should not
> crash to 3rd party bug when it could just feed the file to correct
> demuxer instead of doing "the file extensions are cool". Whatever..

The only way VLC could avoid crashing when a third party crashes is while
running it in a separate process. And what's the point? if the parser is
buggy one might well be able to exploit that to run code instead of
crashing. Doing some magic autodetection in VLC is not going to hide parser
bugs in libmodplug, not from a security point of view.

If you don't like this, you're welcome to:
1/ complain to the libmodplug maintainer(s),
2/ not build the VLC modplug plugin.

-- 
Rémi Denis-Courmont