Re: prominent message on website about "use only on trusted input"?

Am Fri, 28 Jul 2017 12:31:03 +0200
schrieb [email protected]: 

> Did we had reports on inputs not handled through the decoding library?

Barring any work to finally replace the mpglib, recommending use of
LAME with plain PCM/WAV only might be a sensible option.

Perhaps a quick intermediate step could be to replace the decoder part
of mpglib with libmpg123 bindings and keep the internal mpglib for the
frame analyzer tool? If such a change would be considered, I could be
motivated to prepare the patch. Then we only need a warning to use the
current version, please … denial of service of the analyzer seems less
of a public health issue.


Alrighty then,

Thomas
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Lame-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lame-dev