[vlc-devel] Regarding the seemingly still "obscure" security problem

Rémi Denis-Courmont rem at videolan.org
Sun Jan 18 16:04:45 CET 2009

Le dimanche 18 janvier 2009 16:21:31 Laurent Aimar, vous avez écrit :
> The mozilla plugin is using libvlc_playlist_add_extended :(
>  The problem I see is that libvlc API has no way to add options without
> making them trusted.
>  So libvlc need a new version which will not make options trusted of
> libvlc_media_add_option and libvlc_playlist_add_extended.
>  Then the mozilla plugin must be updated to use them.

*Adding* functions to libvlc is fine. We just need to increase the version 
_and_ the age of the shared object. We cannot remove or change existing 
functions though.

Rémi Denis-Courmont

More information about the vlc-devel mailing list