Re: prominent message on website about "use only on trusted input"?
Alexander Leidinger <[email protected]> Sat, 29 Jul 2017 17:58:42 +0200
| Newsgroups | gmane.comp.audio.mp3.lame |
|---|---|
| Message-ID | <20170729175842.Horde.uCj86iMx7r7to1kAvXJsucL@webmail.leidinger.net> |
Quoting [email protected] (from Fri, 28 Jul 2017 12:31:03 +0200): > On 2017-07-28 11:56, Alexander Leidinger wrote: > >> given the recent messages about more attention by security researchers >> to LAME, I suggest we add a prominent message (maybe even on the main >> page) about using LAME only on trusted input. > > Hello, > > Did we had reports on inputs not handled through the decoding library? Reports on WAV input. https://sourceforge.net/p/lame/bugs/463/ https://sourceforge.net/p/lame/bugs/462/ https://sourceforge.net/p/lame/bugs/461/ I didn't look at the other reports. I didn't look closer if it is easy to fix or not (probably there is an easy fix to _just_ fix what is reported). Bye, Alexander. -- http://www.Leidinger.net [email protected]: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org [email protected] : PGP 0x8F31830F9F2772BF ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot