[FFmpeg-devel] Re: question about submitting security patches

2025-11-13 Thread ff--- via ffmpeg-devel 

On 2025-11-13 06:50, Timo Rothenpieler via ffmpeg-devel wrote:

On 13/11/2025 04:06, Michael Niedermayer via ffmpeg-devel wrote:

Hi Kieran

On Wed, Nov 12, 2025 at 12:09:00AM -0800, Kieran Kunhya via 
ffmpeg-devel wrote:

On Mon, 10 Nov 2025, 19:00 Michael Niedermayer via ffmpeg-devel, <
[email protected]> wrote:


Hi Remi

On Mon, Nov 10, 2025 at 06:03:38PM +0200, Rémi Denis-Courmont via
ffmpeg-devel wrote:
Le lauantaina 8. marraskuuta 2025, 10.34.24 Itä-Euroopan 
normaaliaika

Thomas

Dullien via ffmpeg-devel a écrit :
What's the best way to submit these patches? There is the bug 
tracker,
there is this mailing list - what's the best way to contribute 
them?


I don't think that DNN-generated patches are compatible with the 
LGPL in

the
first place, or it is at best very uncertain that they are. So then 
you

cannot

contribute DNN-generated patches in any useful way at all.


If you have concrete legal analysis or case law that supports this 
claim,

please share it.



If an LLM was trained on the leaked Microsoft Windows source code and 
it
used elements of that code when asked to write an FFmpeg patch, would 
that

patch be acceptable in your eyes?


If a human was trained on the leaked Microsoft Windows source code and 
he
used elements of that code when asked to write an FFmpeg patch, would 
that

patch be acceptable in your eyes?

We should forbid human written code?


I mean, that is in fact generally how situations like that are handled.
At least I have seen it multiple times on Projects like the Dolphin 
Emulator that people who read the leaked Nintendo code were barred from 
ever contributing again once found out, cause it would give Nintendo 
legal ground to take down the project.


the small fixes to regular code in ffmpeg wont be fixed with 1000 lines 
of windows/nintendo source code so its a bit of a moot point.


-compn
___
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

[FFmpeg-devel] Re: Update on your FLOSS/fund application

2025-11-16 Thread ff--- via ffmpeg-devel 

On 2025-11-16 07:59, Michael Niedermayer via ffmpeg-devel wrote:
On Sun, Nov 16, 2025 at 04:12:00PM +0100, Michael Niedermayer via 
ffmpeg-devel wrote:
On Sun, Nov 16, 2025 at 01:56:49PM +, Kieran Kunhya via 
ffmpeg-devel wrote:

> On Sun, 16 Nov 2025, 05:04 Michael Niedermayer via ffmpeg-devel, <
> I could do this if I am given an SPI contact.
I think the SPI contact needs to be handled by Stefano and me 
otherwise we will

have confusion and delays. Ill try to get that done today.

ive sent the floss.fund mail to SPI asking for advice how to proceed
As said, (on the assumtation that this all works) we will roughly need
(this is not a hard exact list, just what i think we need)


from what i looked at, floss fund is just going to wire to an account 
(our spi account). which means the spi account has to have some beefy 
documentation behind it. and SPI has to send that documentation to them.


probably what you should do is just ask spi and floss to contact each 
other to set it up. dont really need anyone to do much more else wise.


and since you and stefano are the spi contacts, its up to you two to get 
it done.


cheers
-compn
___
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

[FFmpeg-devel] Re: [RFC] Funded Task Ideas

2025-11-19 Thread ff--- via ffmpeg-devel 

On 2025-10-13 19:40, Michael Niedermayer via ffmpeg-devel wrote:

Hi Everyone

As we are now looking for sponsors, we also should look for tasks to 
fund.


as i suggested on irc, a j2k vulkan decoder. since a lot of archivists 
are still stuck with j2k.

also would be good to decode (maybe in realtime?) j2k dcp files.
https://multimedia.cx/mirror/DCI_Digital_Cinema_System_Spec_v1.pdf

cheers
-compn
___
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]