Comment by bethekidyouwant 2 days ago How does the browser use it ?unless they mean there’s a zero day in libavcodec 6 comments bethekidyouwant Reply fpoling 2 days ago Browsers run it in a sandbox process together with allocator hardening. Most of the bugs then are just crashed of the sandboxAnother option is WASM or WASM-style sandboxes if using another process is undesirable. johnnythunder 2 days ago One chained sandbox escape away from compromise. ttoinou 2 days ago AhahBut are the compiler+OS that runs the ffmpeg executable really a sandbox ? 1 reply → loeg 2 days ago Which is of course better than zero sandbox escapes.
fpoling 2 days ago Browsers run it in a sandbox process together with allocator hardening. Most of the bugs then are just crashed of the sandboxAnother option is WASM or WASM-style sandboxes if using another process is undesirable. johnnythunder 2 days ago One chained sandbox escape away from compromise. ttoinou 2 days ago AhahBut are the compiler+OS that runs the ffmpeg executable really a sandbox ? 1 reply → loeg 2 days ago Which is of course better than zero sandbox escapes.
johnnythunder 2 days ago One chained sandbox escape away from compromise. ttoinou 2 days ago AhahBut are the compiler+OS that runs the ffmpeg executable really a sandbox ? 1 reply → loeg 2 days ago Which is of course better than zero sandbox escapes.
ttoinou 2 days ago AhahBut are the compiler+OS that runs the ffmpeg executable really a sandbox ? 1 reply →
Browsers run it in a sandbox process together with allocator hardening. Most of the bugs then are just crashed of the sandbox
Another option is WASM or WASM-style sandboxes if using another process is undesirable.
One chained sandbox escape away from compromise.
Ahah
But are the compiler+OS that runs the ffmpeg executable really a sandbox ?
1 reply →
Which is of course better than zero sandbox escapes.