On 21/01/16 23:35, Andreas Cadhalpun wrote: > On 21.01.2016 23:21, Luca Barbato wrote: >> On 21/01/16 23:03, Andreas Cadhalpun wrote: >>> Why not fix the issue properly instead of removing useful functionality? >> >> It is not exactly useful (since it is quite unwieldy) > > But I'm sure it's used in quite some scripts. > >> and the initial >> infrastructure to policy path and protocols is already in the ml. > > I don't see how that would fix this problem.
Let's try to make sure we are talking about the same problem here. by using hls you might craft a playlist containing a concat of a playlist w/out a final new line. So you would send the initial part of the file together with the url. This is an information leak. It is moderate since the url has a maximum size that is sort of small and libav's concat does not have a mean to send a file in chunks. So you cannot send /etc/shadow as whole anyway. The ways to fix the specific problem problem: - provide a blacklist/whitelist option in hls (from me, first solution)-> Anton disliked it since it is too specific, courmish pointed out you can feed such line over any playlist some application using avformat supports. - have a pluggable avio-wide infrastructure to policy protocols and paths (from Anton) -> It isn't simple to complete it. - drop concat (agreed by me, Anton and Rémi) -> It is radical, but the feature itself is quite fringe and I would rather drop it. avconv itself may stay compatible with scripts by implementing it in program itself or providing a better interface for it while at it. lu _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
