This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new c736c6d10f doc/developer.texi: More precisse wording for Robustness
c736c6d10f is described below
commit c736c6d10f58c28d1fbb1c7e1b50487015e4dd3e
Author: Michael Niedermayer <[email protected]>
AuthorDate: Sun Aug 9 17:09:01 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Tue Aug 11 21:33:07 2026 +0000
doc/developer.texi: More precisse wording for Robustness
Fairy takes this literally
See: #23985
Signed-off-by: Michael Niedermayer <[email protected]>
---
doc/developer.texi | 12 +++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)
diff --git a/doc/developer.texi b/doc/developer.texi
index 0a0cce63f5..92ccedd381 100644
--- a/doc/developer.texi
+++ b/doc/developer.texi
@@ -411,9 +411,15 @@ The code must behave correctly under such conditions.
@subheading Robustness
The code must treat as untrusted any bytestream received from a caller or read
-from a file, network, etc. It must not misbehave when arbitrary data is sent to
-it - typically it should print an error message and return
-@code{AVERROR_INVALIDDATA} on encountering invalid input data.
+from a file, network, etc. Arbitrary input must never cause unsafe
+behavior or a security issue.
+
+Common real-world errors of common formats and codecs should be detected where
practical,
+reported where appropriate, and handled to produce the best output possible,
+for example through error concealment.
+
+All errors must still be handled safely, but if they are detected,
+reporting or how they are handled is left to the implementation.
@subheading Memory allocation
The code must use the @code{av_malloc()} family of functions from
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
