[vlc-devel] [PATCH] Adding caf file demuxer module.

Rafaël Carré funman at videolan.org
Mon Sep 23 13:15:26 CEST 2013


Le 22/09/2013 22:12, Matthias Keiser a écrit :
> 
> Am 22.09.2013 um 00:03 schrieb Rafaël Carré <funman at videolan.org>:
> 
>> So I would say bailing out if > UINT32_MAX is the right thing to do.
> OK.
> 
>> Do you expect valid files to use such high values?
> No.
> 
>> Another question is can we DoS VLC with a carefully crafted file?
>>
>> Let's say if it's stuck reading 4GB (-1 byte) on a HTTP link and on a
>> mobile phone with 3G connection.
> 
> I'm not sure I understand exactly what you mean, but yeah, I guess so, if the app is expecting data, and the network doesn't deliver, we might be stuck. But I feel not really qualified to answer this since I don't know (yet) the architecture of VLC very well.

No problem then, we'll look at it.



More information about the vlc-devel mailing list