There is at least one potential heap overflow in mplayer.c:get_metadata:
meta = malloc (8);
sprintf (meta, "0x%08X", sh_video->format);
So here is a patch to change the way "meta" is handled in this function.
--
Clément B.
Not sent from a jesusPhone.