> Yes, I meant Linux The demo is on Windows. The goal is to do a sandbox that works on most OSes. And, it will not solve the decoder issue, since it is on the

> Yes, I meant Linux The demo is on Windows. The goal is to do a sandbox that works on most OSes. And, it will not solve the decoder issue, since it is on the decoding side, which still has access to the GPU/Aout and the kernel. > Read access to an existing FD is not the same as full FS access, and there's no demux involved here. You're totally missing the point here. The issue is demuxers/decoders/output, not really the access. Reading from an FD or not would not solve the buffer overflow exploitation (if it was actually exploitable).