Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U...
by viraptor on Wednesday May 24, 2017 @08:01AM
(#14409339)
I'm not sure what you're trying to say. Yes, I meant Linux. Yes, it can solve the issue of separate subtitle files, which this article is about. Read access to an existing FD is not the same as full FS access, and there's no demux involved here.
[ Parent
| on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U...
by jbk on Wednesday May 24, 2017 @08:04AM
(#14409354)
> Yes, I meant Linux
The demo is on Windows. The goal is to do a sandbox that works on most OSes.
And, it will not solve the decoder issue, since it is on the decoding side, which still has access to the GPU/Aout and the kernel.
> Read access to an existing FD is not the same as full FS access, and there's no demux involved here.
You're totally missing the point here. The issue is demuxers/decoders/output, not really the access.
Reading from an FD or not would not solve the buffer overflow exploitation (if it was actually exploitable).