[vlc-devel] Regarding the seemingly still "obscure" security problem

[Rémi Denis-Courmont]

Le dimanche 18 janvier 2009 16:21:31 Laurent Aimar, vous avez écrit :
> The mozilla plugin is using libvlc_playlist_add_extended :(
>
>  The problem I see is that libvlc API has no way to add options without
> making them trusted.
>  So libvlc need a new version which will not make options trusted of
> libvlc_media_add_option and libvlc_playlist_add_extended.
>  Then the mozilla plugin must be updated to use them.

*Adding* functions to libvlc is fine. We just need to increase the version 
_and_ the age of the shared object. We cannot remove or change existing 
functions though.

-- 
Rémi Denis-Courmont
http://git.remlab.net/cgi-bin/gitweb.cgi?p=vlc-courmisch.git;a=summary