Again, this is a crash bug, and again, whether it's a "self-dos" isn't a quality of the bug or ffmpeg. The implications of the crash depends entirely on the im

Again, this is a crash bug, and again, whether it's a "self-dos" isn't a quality of the bug or ffmpeg. The implications of the crash depends entirely on the implementation of the process it crashes. If I use ffmpeg as a library it'll crash my process upon processing the offending file. How is my process designed? How is every process that uses ffmpeg designed? You don't know, therefore you can't say that it's a "self-dos" in every case even if you know that it is in some cases. Maybe I am clever enough to have read up on the history of ffmpeg vulnerabilities before deployment to an attacker-facing service and have designed a solution where a crash has minimal implications, but maybe I'm not, and haven't. It's beside the point.