0
Guillaume Emont
Igalia
Internets = cute videos of [insert favourite animal]
Trustworthy?
Complex software written by
human beings can have bugs.
sandboxeddecodebin
Biggest limitations so far:
• no upstream communication => no seeking
• overhead: 720p ogg/theora on my i5: 20-30% -> 30-4...
Potential solutions:
• better wrapper around the sandboxed part
of the pipeline (with upstream communication)
• put the wh...
Thank You

guijemont@igalia.com
http://guij.emont.org/blog/
https://github.com/guijemont/Sandboxed-Player

Image Credits:
...
Sandbox all the pipelines! (GUADEC 2012)
Sandbox all the pipelines! (GUADEC 2012)
Sandbox all the pipelines! (GUADEC 2012)
Upcoming SlideShare
Loading in...5
×

Sandbox all the pipelines! (GUADEC 2012)

421

Published on

By Guillaume Emont.

Playing a digital media is something complex, that requires non-trivial code. Such code is likely to have unknown security issues. It is therefore unwise to trust such code to handle untrusted data, such as a cat video[1] from the internet.
One solution that could be applied to GStreamer is to run the non-trivial code inside a sandbox. Gillaume has experimented a bit[2] with the idea and would like to expose his preliminary results.

[1] or a hippo video
[2] http://guij.emont.org/blog/2012/05/08/video-decoding-in-a-sandbox/

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
421
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
1
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Transcript of "Sandbox all the pipelines! (GUADEC 2012)"

  1. 1. Guillaume Emont Igalia
  2. 2. Internets = cute videos of [insert favourite animal]
  3. 3. Trustworthy?
  4. 4. Complex software written by human beings can have bugs.
  5. 5. sandboxeddecodebin
  6. 6. Biggest limitations so far: • no upstream communication => no seeking • overhead: 720p ogg/theora on my i5: 20-30% -> 30-40% cpu
  7. 7. Potential solutions: • better wrapper around the sandboxed part of the pipeline (with upstream communication) • put the whole pipeline in the sandbox
  8. 8. Thank You guijemont@igalia.com http://guij.emont.org/blog/ https://github.com/guijemont/Sandboxed-Player Image Credits: Sandbox: Public Domain by Hyena http://en.wikipedia.org/wiki/File:Sandpit.jpg beer: CC BY-NC-SA 2.0 Martin Ibert http://www.flickr.com/photos/mar_ibert/
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×