News for hackers. Stuff that matters.

A comment on Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users. Parent comment

Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @08:06AM (#14409362)
But then you need to copy the memory from the decoder to the video output or you get back to the same problem to work-on.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by Filligree on Wednesday May 24, 2017 @08:26AM (#14409477)
No, you can use a shared memory segment for a buffer just for that.

It's more coding, certainly, but it's possible. Security is an option if we wanted it.

[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @08:42AM (#14409556)
That's exactly the point above. See my above comment.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by Filligree on Wednesday May 24, 2017 @08:57AM (#14409639)
I'm not sure, it sounds like you're saying we'd need to copy memory.

The shared memory segment can be a GPU image buffer, so I don't think that's true.

[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @09:03AM (#14409684)
See comment above with "the solution".

Either you need to have multi-process and correct IPC, or you need to copy.

[ Parent | on HN ]