vreg

3 ms·

1. 1.▲
   by vreg 11mo ago

   All code should be considered potentially vulnerable, that's why we have so many layers of exploit mitigation from the compiler to the runtime environment to the overall design of the system the code is running in.
2. 2.▲
   by vreg 11mo ago

   This is a volunteer-run open source project. Your expectations are unrealistic and, to be quite frank, offensive.
3. 3.▲
   by vreg 11mo ago

   He sounds bitter.
4. 4.▲
   by vreg 11mo ago

   If that is true then Google should be strictly sandboxing ffmpeg and filtering the input before it even gets there. A solid defense-in-depth approach would make sure it's highly unlikely this vulnerable code would be reached, and if it