>I mean, that's how people get hacked. If vlc crashed on my computer, and every day I should raise thanks to my gods that I do not use vlc, I would immediately unplug it and thoughtfully consider the circumstances under which it would be safe to turn it back on.

What are you doing on your computer where it is really a threat to you? I'm curious as to your specific use case :)

Right, this is why video parse / decode ought to be sandboxed. Writing secure code for these formats, especially in C, is really hard. I just sort of glanced at the bug in the repo, but it sounds plausible. It certainly wouldn’t be the first of its kind.

> I mean, that's how people get hacked.

...when was the last documented case of an in-the-wild hack targeting VNC?