By Guillaume Emont. Playing a digital media is something complex, that requires non-trivial code. Such code is likely to have unknown security issues. It is therefore unwise to trust such code to handle untrusted data, such as a cat video[1] from the internet. One solution that could be applied to GStreamer is to run the non-trivial code inside a sandbox. Gillaume has experimented a bit[2] with the idea and would like to expose his preliminary results. [1] or a hippo video [2] http://guij.emont.org/blog/2012/05/08/video-decoding-in-a-sandbox/

1. Guillaume Emont
Igalia

3. Internets = cute videos of [insert favourite animal]

4. Trustworthy?

5. Complex software written by
human beings can have bugs.

8. sandboxeddecodebin

9. Biggest limitations so far:
• no upstream communication => no seeking
• overhead: 720p ogg/theora on my i5: 20-30% -> 30-40% cpu

10. Potential solutions:
• better wrapper around the sandboxed part
of the pipeline (with upstream communication)
• put the whole pipeline in the sandbox

11. Thank You
guijemont@igalia.com
http://guij.emont.org/blog/
https://github.com/guijemont/Sandboxed-Player
Image Credits:
Sandbox: Public Domain by Hyena http://en.wikipedia.org/wiki/File:Sandpit.jpg
beer: CC BY-NC-SA 2.0 Martin Ibert http://www.flickr.com/photos/mar_ibert/