[FFmpeg-devel] [PATCH 3/3] avformat: add youtube-dl based demuxer

[Reimar Döffinger]

On 08.04.2015, at 19:30, Hendrik Leppkes <h.leppkes at gmail.com> wrote:
> On Wed, Apr 8, 2015 at 7:27 PM, Gilles Chanteperdrix
> <gilles.chanteperdrix at xenomai.org> wrote:
>> 
>>> Nice security hole.
>> 
>> how is that ? I do not see any buffer overflow possible.
>> 
> 
> Executing a command with system() is very unsafe.

These kind of issues are btw. one of the reasons that from my point of view speak for having such functionality in FFmpeg
If you leave it to the applications, at least half of them will have such security holes.
I admit that I can understand people being nervous about such code in FFmpeg though...