Re: prominent message on website about "use only on trusted input"?
[email protected] Fri, 28 Jul 2017 12:31:03 +0200
| Newsgroups | gmane.comp.audio.mp3.lame |
|---|---|
| Message-ID | <[email protected]> |
On 2017-07-28 11:56, Alexander Leidinger wrote: > given the recent messages about more attention by security researchers > to LAME, I suggest we add a prominent message (maybe even on the main > page) about using LAME only on trusted input. Hello, Did we had reports on inputs not handled through the decoding library? If all the identified issues are through decoding, it might be worth explaining that LAME can be built without decoding features, which reduces the number of identified issues. Regards, -- Gabriel Bouvigne ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot