FLAC vulnerabilities

[riksweeney]

Slashdot is reporting that multiple FLAC vulnerabilities are affecting players using libavcodec, even hardware players. Hopefully this will get sorted out before someone hacks Rockbox and uses it to steal everyone's credit card information and murder their dogs.

[Bagder]

Actually, the report (http://research.eeye.com/html/advisories/published/AD20071115.html) talks about libFLAC and it also mentions in what versions that these problems are already fixed.

However, Rockbox doesn't use libFLAC. The FLAC decoder in Rockbox is from ffmpeg, and the flac and ogg comment parsing code are our own.