ffmpeg is also rather popular and delivers a lot of functionality. Its unlikely ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		gerdesj 3 days ago \| parent \| context \| favorite \| on: Twenty One Zero-Days in FFmpeg ffmpeg is also rather popular and delivers a lot of functionality. Its unlikely that you don't have it installed. Yes, there are security issues but quite a few are not ffmpeg itself related - the input is pretty shabby or at least not exactly easy to deal with! Obviously, they could do with some assistance and I'm sure you and I will both dive in with equal zeal.
		help

RetroTechie 3 days ago [–]

Hmm.. "shabby input" that makes software xyz fail is a problem in software xyz itself!

"Validate your inputs" is a common rule. Fuzzing is a thing. Both for good reasons (including security).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact