From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ffmpeg-devel-bounces@ffmpeg.org>
Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100])
	by master.gitmailbox.com (Postfix) with ESMTPS id EAD504C59F
	for <ffmpegdev@gitmailbox.com>; Sun,  6 Apr 2025 13:21:12 +0000 (UTC)
Received: from [127.0.1.1] (localhost [127.0.0.1])
	by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 2AF02687D3D;
	Sun,  6 Apr 2025 16:21:08 +0300 (EEST)
Received: from mail-qt1-f178.google.com (mail-qt1-f178.google.com
 [209.85.160.178])
 by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id B2081687C7E
 for <ffmpeg-devel@ffmpeg.org>; Sun,  6 Apr 2025 16:21:01 +0300 (EEST)
Received: by mail-qt1-f178.google.com with SMTP id
 d75a77b69052e-47698757053so41822661cf.0
 for <ffmpeg-devel@ffmpeg.org>; Sun, 06 Apr 2025 06:21:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1743945660; x=1744550460; darn=ffmpeg.org;
 h=content-transfer-encoding:in-reply-to:autocrypt:from
 :content-language:references:to:subject:user-agent:mime-version:date
 :message-id:from:to:cc:subject:date:message-id:reply-to;
 bh=DsM5XDSHtEpUe6pQJhUBRkRkseNAtxcNmtIkZ8Tn4/4=;
 b=JPr/PCPMsdZe6nGm5yOw2ull/qVQNrHZn/Dkp5asn0FVyZXfBZJZuPlrpF6HB16O+I
 pN5H/ZPYs+mJkd58BnGhlTIh7w3DNQRBF+ZPt7v2L/Pp3yuSOwTLpE++KVaNsYNJ1NP8
 5WZkOOS2/j/buEcQWIjgd6woywkxqS+vs3S8ypN6fuFjFzESoMWjmPRJrshhgBYGpMsK
 QhUmSekRzicBi+Wn/D8wbZn4kdtJ0eQQ7szZ/Bwrg6NK8YOmp8jo+9nMf3HA24u7UfUZ
 3i8c1uCKjRUjskYFVNWJv+P7Q8RDlXrtSN+/LJsA0D9QUVKpw3BQVuznjBognpjYwhMv
 5Z1A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1743945660; x=1744550460;
 h=content-transfer-encoding:in-reply-to:autocrypt:from
 :content-language:references:to:subject:user-agent:mime-version:date
 :message-id:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=DsM5XDSHtEpUe6pQJhUBRkRkseNAtxcNmtIkZ8Tn4/4=;
 b=pv7/3hljLh1NjIFGPU2gEcxLhEQhV0nqaYU6TCiBpaNx/IqjsBxJqtGcGr1QMDeZZ7
 BQ3Hju69rvJDj+bgrdGIB54Y9hemwj5XqJGQ48MJhhpkMjT14TczbJ1M3Q5M9yoSZA01
 mR+Oe2GzG1oMdrwM5OUZKoANdJ7OWe4PceIzo+PugB2xWUH91/w8nJM9TolSD7baTxin
 XjW+L6c61QFUowYMM2cjWlEI89jDJsMuU5FCwbOIqf7p3K8KWane0d53f+nXvUh1jlsj
 3INppXmHCrxOtk1Q/AoZE/AC88cJKWCTrmqxRPHiTF7MK5u8vQ+hn69Y0kQ61qIdYvc/
 RBEA==
X-Gm-Message-State: AOJu0YyT+OukAPLGZ+yeCQ5J6TlYZGEE4uOaXMj37dYvDOn67l4+OINv
 iveJr9eVZ5GVEz1qIR+UJT+LG0FJ3y4Q9qYnLR9t5Za6MK0OsVWZqZWJUg==
X-Gm-Gg: ASbGncsBdfLX9DWkDuxfXs7MyJRJ5uKG5stF9BU4QgLsWv6Jyje/vlmxXk0SrFfRWsl
 +QbPk6MOvWOgr8X7Qi4340kKdajfnId1GALvNKuDijMkMzLiHyMxbqxXuW2g3IVHUSFOXJlKSAk
 3y5Nm7OR4H1SA9w2NwmJR3rWcax4VydvZ3rE62NyLJEqx0ZVxYXxdFJ1fu+iEPJNP4qCThWMPxC
 L3r9uiI/CxjyMjfDA8YpCZj7ulQ5rbbLPJIRFSQtYuroZvYk92waHnXqPT7x0baGn3W6l9dD3nJ
 CcqeOPtoJvKM6Oz58QyW0OaB6aqvPT1EZ/NzfaZDwHlHT7K5UistdIjwBpxPsrvy/77TQ6LsEc6
 gbe/X4B7Az3d3AdGgJ/7CtYig
X-Google-Smtp-Source: AGHT+IHLG0zO+e2T2xabls+GqKChRTSwCyb9Jfe2LyVYUlbOxTZ/0qzl4t8jOaSM9otFSmvmeggUiQ==
X-Received: by 2002:a05:622a:1313:b0:476:add4:d2c6 with SMTP id
 d75a77b69052e-47925a791bbmr136247781cf.50.1743945659913; 
 Sun, 06 Apr 2025 06:20:59 -0700 (PDT)
Received: from [192.168.1.35] (99-104-239-121.lightspeed.livnmi.sbcglobal.net.
 [99.104.239.121]) by smtp.gmail.com with ESMTPSA id
 af79cd13be357-7c76e75a605sm472853385a.29.2025.04.06.06.20.59
 for <ffmpeg-devel@ffmpeg.org>
 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
 Sun, 06 Apr 2025 06:20:59 -0700 (PDT)
Message-ID: <7e33746e-5772-4f82-87b1-7fa0ebbd9f09@gmail.com>
Date: Sun, 6 Apr 2025 09:20:58 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: ffmpeg-devel@ffmpeg.org
References: <20250406111944.706970-1-michael@niedermayer.cc>
Content-Language: en-US-large
From: Leo Izen <leo.izen@gmail.com>
Autocrypt: addr=leo.izen@gmail.com; keydata=
 xjMEZZw8HxYJKwYBBAHaRw8BAQdAgcfI+LbtjWarA7LQu6/WAPlKkn9tn4HalmHgGVhMUdzN
 KkxlbyBJemVuIChUcmFuZXB0b3JhKSA8bGVvLml6ZW5AZ21haWwuY29tPsKTBBMWCgA7FiEE
 HYMKC85GcJ4gOyb8dk5I6kgiGDMFAmWcPB8CGwMFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcC
 F4AACgkQdk5I6kgiGDOnGAEA+oJFwblAblnhK+T5a5EuEbXMTZG4FkYTYz0VmjJ0NHIA/Rn9
 ZE9+EEsH8fmT0hRJSiM3+zbkwQJA9gVVYAek9kMKzjgEZZw8HxIKKwYBBAGXVQEFAQEHQDes
 4thejF9AU2rkGuDuut3CQYwB4SVpI4EzU8uvPJgfAwEIB8J4BBgWCgAgFiEEHYMKC85GcJ4g
 Oyb8dk5I6kgiGDMFAmWcPB8CGwwACgkQdk5I6kgiGDOv3QD+PLXrL0Ihk675Ip5FG+VJOodN
 6e+5n3iYC6wJ75eqG3EA/1nCywoGXlCYuzXgq3el6NOn+8awwaXcTVJFzZCRbe8M
In-Reply-To: <20250406111944.706970-1-michael@niedermayer.cc>
Subject: Re: [FFmpeg-devel] [PATCH 0/4] avformat/hls: Some extension fixes
 that need testing
X-BeenThere: ffmpeg-devel@ffmpeg.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: FFmpeg development discussions and patches <ffmpeg-devel.ffmpeg.org>
List-Unsubscribe: <https://ffmpeg.org/mailman/options/ffmpeg-devel>,
 <mailto:ffmpeg-devel-request@ffmpeg.org?subject=unsubscribe>
List-Archive: <https://ffmpeg.org/pipermail/ffmpeg-devel>
List-Post: <mailto:ffmpeg-devel@ffmpeg.org>
List-Help: <mailto:ffmpeg-devel-request@ffmpeg.org?subject=help>
List-Subscribe: <https://ffmpeg.org/mailman/listinfo/ffmpeg-devel>,
 <mailto:ffmpeg-devel-request@ffmpeg.org?subject=subscribe>
Reply-To: FFmpeg development discussions and patches <ffmpeg-devel@ffmpeg.org>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: ffmpeg-devel-bounces@ffmpeg.org
Sender: "ffmpeg-devel" <ffmpeg-devel-bounces@ffmpeg.org>
Archived-At: <https://master.gitmailbox.com/ffmpegdev/7e33746e-5772-4f82-87b1-7fa0ebbd9f09@gmail.com/>
List-Archive: <https://master.gitmailbox.com/ffmpegdev/>
List-Post: <mailto:ffmpegdev@gitmailbox.com>

On 4/6/25 7:16 AM, Michael Niedermayer wrote:
> Hi all
> 
> This patchset adds all the extensions i found on trac and its links to
> allowed_extensions for hls.
> There was one testcase only so most of this is untested. It may be
> needed to add the extensions also to demuxers or as exceptions
> specific to hls elsewhere.
> 

If the issue at hand is that bad extensions can cause invalid 
demuxers/decoders to be probed, why don't we just use a demuxer or 
decoder whitelist? We already have code to support this.

It feels like we're going to be sending these sorts of "add this one 
extension we didn't think about" patch over and over again when we could 
have just solved the original problem. This feels like an XY problem, we 
really want to accomplish X but we're solving Y because we believe it 
will fix X. Rather than just fixing X.

- Leo Izen (Traneptora)

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".