Skip to content
Commit db9d1835 authored by Bastien Nocera's avatar Bastien Nocera
Browse files

Fix crasher parsing hacker medley RSS feed

From:
https://bugzilla.redhat.com/show_bug.cgi?id=582850

Parsing the RSS at http://feeds.feedburner.com/HackerMedley
caused a crash because we weren't zero'ing the newly re-allocated
buffer for the token parsing.
parent 018075b3
  • Reporter

    I've submitted a ticket at https://sourceforge.net/p/xine/tickets/1/ to get this merged upstream.

    Hopefully, we can make xine-lib as a dependency in meson from now on, and stop manually maintaining the parser code.

  • Author Maintainer

    Hopefully, we can make xine-lib as a dependency in meson from now on

    Absolutely not.

  • Reporter

    Any reason. I checked the download ( 4MB ) and install size ( 10MB ). Doesn't seem bad. Does it cause any codec conflict ?

    # apt-get install libxine2
    
    Reading package lists... Done
    Building dependency tree       
    Reading state information... Done
    The following additional packages will be installed:
      libgraphicsmagick-q16-3 libiso9660-11 libmng2 libmodplug1 libvcdinfo0 libxine2-bin libxine2-doc libxine2-ffmpeg libxine2-misc-plugins libxine2-plugins
    Suggested packages:
      graphicsmagick-dbg gxine xine-ui
    The following NEW packages will be installed:
      libgraphicsmagick-q16-3 libiso9660-11 libmng2 libmodplug1 libvcdinfo0 libxine2 libxine2-bin libxine2-doc libxine2-ffmpeg libxine2-misc-plugins
      libxine2-plugins
    0 upgraded, 11 newly installed, 0 to remove and 2 not upgraded.
    Need to get 3,820 kB of archives.
    After this operation, 10.6 MB of additional disk space will be used.
    Do you want to continue? [Y/n] 
  • Reporter

    On a second thought, I wouldn't want unrelated packages to be installed just for a couple of files. But, I don't think maintaining and manually syncing parser code is good either.

    Is there any middle ground here ?

0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment