Re: [FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-05 Thread Michael Niedermayer
On Mon, Jun 05, 2017 at 11:13:06AM +0200, Paul B Mahol wrote: > On 6/5/17, Michael Niedermayer wrote: > > On Sat, Jun 03, 2017 at 09:20:04PM +0200, Michael Niedermayer wrote: > >> This reduces the attack surface of local file-system > >> information leaking. > >> > >> It prevents the existing expl

Re: [FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-05 Thread Michael Niedermayer
On Mon, Jun 05, 2017 at 08:26:34AM +0200, Nicolas George wrote: > Le septidi 17 prairial, an CCXXV, Michael Niedermayer a écrit : > > Applied with the author name joke suggested by nicolas > > Despite Hendrik's objection? I have of course talked with hendrik before pushing. It was him who suggest

Re: [FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-05 Thread Paul B Mahol
On 6/5/17, Michael Niedermayer wrote: > On Sat, Jun 03, 2017 at 09:20:04PM +0200, Michael Niedermayer wrote: >> This reduces the attack surface of local file-system >> information leaking. >> >> It prevents the existing exploit leading to an information leak. As >> well as similar hypothetical att

Re: [FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-04 Thread Nicolas George
Le septidi 17 prairial, an CCXXV, Michael Niedermayer a écrit : > Applied with the author name joke suggested by nicolas Despite Hendrik's objection? The joke name was nit an approval, and I had no authority to give it anyway. (On a phone and bad network, will reply to the other mail later.) --

Re: [FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-04 Thread Michael Niedermayer
On Sat, Jun 03, 2017 at 09:20:04PM +0200, Michael Niedermayer wrote: > This reduces the attack surface of local file-system > information leaking. > > It prevents the existing exploit leading to an information leak. As > well as similar hypothetical attacks. > > Leaks of information from files an

[FFmpeg-devel] [PATCH] avformat/hls: Check local file extensions

2017-06-03 Thread Michael Niedermayer
This reduces the attack surface of local file-system information leaking. It prevents the existing exploit leading to an information leak. As well as similar hypothetical attacks. Leaks of information from files and symlinks ending in common multimedia extensions are still possible. But files wi