News for hackers. Stuff that matters.
Re:FFmpeg to Google: Fund us or stop sending bugs by omnicognate on Tuesday November 11, 2025 @02:38PM (#45891799)
AIUI, (lib)ffmpeg is used by practically everything that does anything with video, including such definitely-security-sensitive things as Chrome, which people use to play untrusted content all the time.
Re:FFmpeg to Google: Fund us or stop sending bugs by godshatter on Tuesday November 11, 2025 @03:39PM (#45892520)
Then maybe the Google chrome devs should submit a PR to ffmpeg.
Re:FFmpeg to Google: Fund us or stop sending bugs by omnicognate on Tuesday November 11, 2025 @04:00PM (#45892770)
Sure. And fund them.
Re:FFmpeg to Google: Fund us or stop sending bugs by walletdrainer on Wednesday November 12, 2025 @04:29AM (#45898129)
Chrome devs frequently do just that, Chrome just doesn’t enable this codec.
Re:FFmpeg to Google: Fund us or stop sending bugs by cogman10 on Tuesday November 11, 2025 @02:43PM (#45891853)
hmm, didn't realize chrome was using ffmpeg in the background. That definitely makes it more dangerous than I supposed.

Looks like firefox does the same.

Re:FFmpeg to Google: Fund us or stop sending bugs by conradev on Tuesday November 11, 2025 @02:53PM (#45891970)
Firefox has moved some parsers to Rust: https://github.com/mozilla/mp4parse-rust
Re:FFmpeg to Google: Fund us or stop sending bugs by rebelwebmaster on Tuesday November 11, 2025 @03:25PM (#45892360)
Firefox also does a lot of media decoding in a separate process.
Re:FFmpeg to Google: Fund us or stop sending bugs by xxs on Wednesday November 12, 2025 @11:57AM (#45902532)
Pretty much anything that has any video uses the library (incl. youtube)