Date: Tue, 30 Jun 2009 19:32:37 +0200 From: Roland Smith <rsmith@xs4all.nl> To: Harald Weis <hawei@free.fr> Cc: freebsd-stable@freebsd.org Subject: Re: Vulnerability question Message-ID: <20090630173237.GB39520@slackbox.xs4all.nl> In-Reply-To: <20090630150832.GA2650@pollux.local.net> References: <20090628205654.GA6237@pollux.local.net> <20090629184052.GB3248@slackbox.xs4all.nl> <20090630150832.GA2650@pollux.local.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--FL5UXtIhxfXey3p5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jun 30, 2009 at 05:08:32PM +0200, Harald Weis wrote: > On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: > > On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > > > Building lxdvdrip stops because linux-pango has known > > > vulnerabilities. > >=20 > > You can ignore vulnerabilities by setting the environment variable > > DISABLE_VULNERABILITIES. See ports(7). >=20 > Yes, I've done this already, but I've stepped back because I cannot > evaluate the risk. >=20 > > Are you running a linux binary of mplayer? Because a native mplayer > > binary does not require linux-pango! It just uses the native pango. >=20 > In fact, it's lxdvdrip which requires linux-pango [via linux-gtk2]. > lxdvdrip is happy with the native mplayer. Looking at the port Makefile [/usr/ports/multimedia/lxdvdrip/Makefile] and Freshports entries [http://www.freshports.org/multimedia/lxdvdrip/] for lxdvdrip, there is no sign of it directly requiring pango, let alone the Linux version. It is mplayer that depends on pango: # cd /usr/ports/multimedia/lxdvdrip # make run-depends-list /usr/ports/misc/buffer /usr/ports/multimedia/dvdauthor /usr/ports/multimedia/libdvdnav /usr/ports/multimedia/libdvdread /usr/ports/multimedia/mpgtx /usr/ports/multimedia/mplayer /usr/ports/multimedia/transcode /usr/ports/sysutils/dvd+rw-tools # cd /usr/ports/multimedia/mplayer # make run-depends-list /usr/ports/accessibility/atk /usr/ports/audio/cdparanoia /usr/ports/audio/esound /usr/ports/audio/libvorbis /usr/ports/converters/libiconv /usr/ports/devel/gio-fam-backend /usr/ports/devel/glib20 /usr/ports/devel/pkg-config /usr/ports/devel/sdl12 /usr/ports/graphics/aalib /usr/ports/graphics/png /usr/ports/multimedia/libtheora /usr/ports/multimedia/mplayer-skins /usr/ports/multimedia/x264 /usr/ports/print/freetype2 /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/ports/x11/libX11 /usr/ports/x11/libXv /usr/ports/x11/libXxf86vm No linux-pango! I suspect that there is something wrong with your ports. Do you have the native version of pango installed?=20 Can you post the output of 'pkg_info -rx lxdvdrip' and 'pkg_info -rx mplaye= r'?=20 > > If you want to rip DVDs, you can simply use mplayer: > >=20 > > mplayer dvd://N -dumpstream -dumpfile title.mpg > >=20 > > where N is the number of the title you want. >=20 > That's interesting. I will try that soon. I hope the manpage does > explain how to burn it then. For burning you'll need other programs. Mplayer/mencoder don't do that. That is where dvdauthor and dvd+rw-tools come in. > But what happens if the title is too long for a DVD5 ? Then you can use mencoder to re-encode it. This takes some experimenting. I tend to re-encode to the H.264 video codec, because it is a lot smaller. I don't know if DVD players support this codec. But then I tend to watch movies mostly on my PC. An example: # Ripping mplayer dvd://1 -dumpstream -dumpfile foo.mpg # Reencoding mencoder foo.mpg -aid 128 -ovc x264 \ -x264encopts subq=3D4:bframes=3D3:b_pyramid:weight_b:qp=3D18:threads=3Dauto= :pass=3D1 \ -vf crop=3D704:464:10:56 -idx -oac mp3lame -o /dev/null ; \ mencoder foo.mpg -aid 128 -ovc x264 \ -x264encopts subq=3D6:partitions=3Dall:8x8dct:me=3Dumh:frameref=3D5:bframes= =3D3:b_pyramid:weight_b:qp=3D18:threads=3Dauto:pass=3D2 \ -vf crop=3D704:464:10:56 -idx -oac mp3lame -o foo.avi # See the size difference! du -m foo.* 1701 foo.avi 6427 foo.mpg The crop numbers (to remove black bands around the movie) can vary per film. Use the -cropdetect option of mplayer to figure out the right numbers to use. Roland --=20 R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) --FL5UXtIhxfXey3p5 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (FreeBSD) iEYEARECAAYFAkpKTDUACgkQEnfvsMMhpyU84ACdHMjhIFe59EVpcZtJYljy6HkK NiMAnRJ+9ftb3u3vjufRBFmWoc2Tm6s0 =dSi+ -----END PGP SIGNATURE----- --FL5UXtIhxfXey3p5--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090630173237.GB39520>