[MPlayer-dev-eng] ASX Regression

Alex Beregszaszi alex at fsn.hu
Mon Oct 6 18:31:16 CEST 2003


Hi,

> Fix the playlist parsing code to make sure it immediately fails on
> non-text data and make sure it has no exploitable overflows and crap,
> so it doesn't make mplayer hang forever on unrecognized files and
> doesn't open up people who aren't using streaming stuff to
> vulnerabilities.
The playlist code SHOULD ALWAYS check for alphanumeric characters, it
shouldn't allow binary bytes in urls..
 
> Make fallback optional and disabled by default, and have mplayerplugin
> pass -fallback-to-playlist or whatever when calling mplayer.
An option like this should be added.

-- 
Alex Beregszaszi <alex at fsn.hu>
(MPlayer Core Developer -- http://www.mplayerhq.hu/)



More information about the MPlayer-dev-eng mailing list