[MPlayer-dev-eng] [PATCH] Do not read codecs.conf files by default

[Michael Niedermayer]

Hi

On Wed, Jan 17, 2007 at 12:16:37AM +0100, Diego Biurrun wrote:
> On Mon, Jan 15, 2007 at 11:01:34PM +0100, Reimar Döffinger wrote:
> > On Mon, Jan 15, 2007 at 08:03:33PM +0100, Diego Biurrun wrote:
> > > IMO dynamic codecs.conf loading should be an optional,
> > > disabled-by-default feature that devs can compile-in if they want.
> > 
> > Going that far, as Michael pointed out, would be a bad idea, among the
> > reasons security considerations.
> 
> I'd call this esoteric at best.  If you can edit codecs.conf to try to
> avoid security problems you might as well recompile 

and so can you recompile ssh, apache, ... after they based on the same
arguments stop caring about their configuration files

iam fine with a hard failure but blindly ignoring a config file and
doing something else then whats written in the file is IMO not ok


> or avoid the
> problematic media.

how? check every file with a hexeditor?

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No great genius has ever existed without some touch of madness. -- Aristotle
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/mplayer-dev-eng/attachments/20070117/104efdec/attachment.pgp>