[FFmpeg-devel] [PATCH 0/4] avformat/hls: Some extension fixes that need testing

[Leo Izen]

On 4/6/25 7:16 AM, Michael Niedermayer wrote:
> Hi all
> 
> This patchset adds all the extensions i found on trac and its links to
> allowed_extensions for hls.
> There was one testcase only so most of this is untested. It may be
> needed to add the extensions also to demuxers or as exceptions
> specific to hls elsewhere.
> 

If the issue at hand is that bad extensions can cause invalid 
demuxers/decoders to be probed, why don't we just use a demuxer or 
decoder whitelist? We already have code to support this.

It feels like we're going to be sending these sorts of "add this one 
extension we didn't think about" patch over and over again when we could 
have just solved the original problem. This feels like an XY problem, we 
really want to accomplish X but we're solving Y because we believe it 
will fix X. Rather than just fixing X.

- Leo Izen (Traneptora)