On 27.04.2024 22:21, Sean McGovern wrote:
Aside: We are now that much closer to summoning a demon inside 'configure' *laughs*.
The reasoning behind this complexification in v2 is that v1 put the string returned by cl.exe into a shell, allowing potential injection vectors.
Granted, the injection would come from inside ffmpeg code, so probably all would be lost at that point anyway, but at the very least, this approach avoids spawning a bunch of subshells we don't need, though is quite a bit uglier.
_______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
