On Sun, May 28, 2017 at 10:04:41PM +0100, Rostislav Pehlivanov wrote:
> The library has stopped being developed and Debian has removed it
> from its repositories citing security issues.
> The native Dirac decoder supports everything the library has and encoding
> support is still provided via the native vc2 (Dirac Pro) encoder. Hence,
> there's no reason to still support linking to the library and potentially
> leading users into security issues.
> ---
>  MAINTAINERS                     |   1 -
>  configure                       |   5 -
>  doc/general.texi                |   2 +-
>  doc/platform.texi               |   2 +-
>  libavcodec/Makefile             |   5 -
>  libavcodec/allcodecs.c          |   1 -
>  libavcodec/libschroedinger.c    | 221 ------------------
>  libavcodec/libschroedinger.h    | 133 -----------
>  libavcodec/libschroedingerdec.c | 395 --------------------------------
>  libavcodec/libschroedingerenc.c | 485 
> ----------------------------------------
>  10 files changed, 2 insertions(+), 1248 deletions(-)
>  delete mode 100644 libavcodec/libschroedinger.c
>  delete mode 100644 libavcodec/libschroedinger.h
>  delete mode 100644 libavcodec/libschroedingerdec.c
>  delete mode 100644 libavcodec/libschroedingerenc.c

If its not removed (due to missing features or bugs in our code)
then it should be marked as AV_CODEC_CAP_EXPERIMENTAL to prevent it
from being used by default thus defusing any security issues

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No human being will ever know the Truth, for even if they happen to say it
by chance, they would not even known they had done so. -- Xenophanes

Attachment: signature.asc
Description: Digital signature

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Reply via email to