News for hackers. Stuff that matters.

A comment on Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users. Parent comment

Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by dom0 on Wednesday May 24, 2017 @07:53AM (#14409283)
> Not even multi-process. Threads on Linux can have their own seccomp profiles.

Feels kinda pointless, since all threads in a process share the same memory protection.

[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by viraptor on Wednesday May 24, 2017 @07:57AM (#14409311)
They don't have to. Clone can do a lot of magic without full processes.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @08:06AM (#14409362)
But then you need to copy the memory from the decoder to the video output or you get back to the same problem to work-on.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by Filligree on Wednesday May 24, 2017 @08:26AM (#14409477)
No, you can use a shared memory segment for a buffer just for that.

It's more coding, certainly, but it's possible. Security is an option if we wanted it.

[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @08:42AM (#14409556)
That's exactly the point above. See my above comment.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by Filligree on Wednesday May 24, 2017 @08:57AM (#14409639)
I'm not sure, it sounds like you're saying we'd need to copy memory.

The shared memory segment can be a GPU image buffer, so I don't think that's true.

[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @09:03AM (#14409684)
See comment above with "the solution".

Either you need to have multi-process and correct IPC, or you need to copy.

[ Parent | on HN ]