[FFmpeg-devel] [PATCH 3/3] avformat: add youtube-dl based demuxer
Gilles Chanteperdrix
gilles.chanteperdrix at xenomai.org
Wed Apr 8 19:48:42 CEST 2015
On Wed, Apr 08, 2015 at 07:30:48PM +0200, Hendrik Leppkes wrote:
> On Wed, Apr 8, 2015 at 7:27 PM, Gilles Chanteperdrix
> <gilles.chanteperdrix at xenomai.org> wrote:
> >
> >> Nice security hole.
> >
> > how is that ? I do not see any buffer overflow possible.
> >
>
> Executing a command with system() is very unsafe.
Indeed, never thought of that. With exec this problem does not
exist, we get to choose how the arguments are split.
--
Gilles.
More information about the ffmpeg-devel
mailing list