From owner-freebsd-stable@FreeBSD.ORG Tue Jun 30 17:32:40 2009 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7E6CF106564A for ; Tue, 30 Jun 2009 17:32:40 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from smtp-vbr5.xs4all.nl (smtp-vbr5.xs4all.nl [194.109.24.25]) by mx1.freebsd.org (Postfix) with ESMTP id 114FF8FC26 for ; Tue, 30 Jun 2009 17:32:39 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from slackbox.xs4all.nl (slackbox.xs4all.nl [213.84.242.160]) by smtp-vbr5.xs4all.nl (8.13.8/8.13.8) with ESMTP id n5UHWcko077361; Tue, 30 Jun 2009 19:32:38 +0200 (CEST) (envelope-from rsmith@xs4all.nl) Received: by slackbox.xs4all.nl (Postfix, from userid 1001) id 01243BA89; Tue, 30 Jun 2009 19:32:37 +0200 (CEST) Date: Tue, 30 Jun 2009 19:32:37 +0200 From: Roland Smith To: Harald Weis Message-ID: <20090630173237.GB39520@slackbox.xs4all.nl> References: <20090628205654.GA6237@pollux.local.net> <20090629184052.GB3248@slackbox.xs4all.nl> <20090630150832.GA2650@pollux.local.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="FL5UXtIhxfXey3p5" Content-Disposition: inline In-Reply-To: <20090630150832.GA2650@pollux.local.net> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.5.20 (2009-06-14) X-Virus-Scanned: by XS4ALL Virus Scanner Cc: freebsd-stable@freebsd.org Subject: Re: Vulnerability question X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2009 17:32:40 -0000 --FL5UXtIhxfXey3p5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jun 30, 2009 at 05:08:32PM +0200, Harald Weis wrote: > On Mon, Jun 29, 2009 at 08:40:52PM +0200, Roland Smith wrote: > > On Sun, Jun 28, 2009 at 10:56:54PM +0200, Harald Weis wrote: > > > Building lxdvdrip stops because linux-pango has known > > > vulnerabilities. > >=20 > > You can ignore vulnerabilities by setting the environment variable > > DISABLE_VULNERABILITIES. See ports(7). >=20 > Yes, I've done this already, but I've stepped back because I cannot > evaluate the risk. >=20 > > Are you running a linux binary of mplayer? Because a native mplayer > > binary does not require linux-pango! It just uses the native pango. >=20 > In fact, it's lxdvdrip which requires linux-pango [via linux-gtk2]. > lxdvdrip is happy with the native mplayer. Looking at the port Makefile [/usr/ports/multimedia/lxdvdrip/Makefile] and Freshports entries [http://www.freshports.org/multimedia/lxdvdrip/] for lxdvdrip, there is no sign of it directly requiring pango, let alone the Linux version. It is mplayer that depends on pango: # cd /usr/ports/multimedia/lxdvdrip # make run-depends-list /usr/ports/misc/buffer /usr/ports/multimedia/dvdauthor /usr/ports/multimedia/libdvdnav /usr/ports/multimedia/libdvdread /usr/ports/multimedia/mpgtx /usr/ports/multimedia/mplayer /usr/ports/multimedia/transcode /usr/ports/sysutils/dvd+rw-tools # cd /usr/ports/multimedia/mplayer # make run-depends-list /usr/ports/accessibility/atk /usr/ports/audio/cdparanoia /usr/ports/audio/esound /usr/ports/audio/libvorbis /usr/ports/converters/libiconv /usr/ports/devel/gio-fam-backend /usr/ports/devel/glib20 /usr/ports/devel/pkg-config /usr/ports/devel/sdl12 /usr/ports/graphics/aalib /usr/ports/graphics/png /usr/ports/multimedia/libtheora /usr/ports/multimedia/mplayer-skins /usr/ports/multimedia/x264 /usr/ports/print/freetype2 /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/ports/x11/libX11 /usr/ports/x11/libXv /usr/ports/x11/libXxf86vm No linux-pango! I suspect that there is something wrong with your ports. Do you have the native version of pango installed?=20 Can you post the output of 'pkg_info -rx lxdvdrip' and 'pkg_info -rx mplaye= r'?=20 > > If you want to rip DVDs, you can simply use mplayer: > >=20 > > mplayer dvd://N -dumpstream -dumpfile title.mpg > >=20 > > where N is the number of the title you want. >=20 > That's interesting. I will try that soon. I hope the manpage does > explain how to burn it then. For burning you'll need other programs. Mplayer/mencoder don't do that. That is where dvdauthor and dvd+rw-tools come in. > But what happens if the title is too long for a DVD5 ? Then you can use mencoder to re-encode it. This takes some experimenting. I tend to re-encode to the H.264 video codec, because it is a lot smaller. I don't know if DVD players support this codec. But then I tend to watch movies mostly on my PC. An example: # Ripping mplayer dvd://1 -dumpstream -dumpfile foo.mpg # Reencoding mencoder foo.mpg -aid 128 -ovc x264 \ -x264encopts subq=3D4:bframes=3D3:b_pyramid:weight_b:qp=3D18:threads=3Dauto= :pass=3D1 \ -vf crop=3D704:464:10:56 -idx -oac mp3lame -o /dev/null ; \ mencoder foo.mpg -aid 128 -ovc x264 \ -x264encopts subq=3D6:partitions=3Dall:8x8dct:me=3Dumh:frameref=3D5:bframes= =3D3:b_pyramid:weight_b:qp=3D18:threads=3Dauto:pass=3D2 \ -vf crop=3D704:464:10:56 -idx -oac mp3lame -o foo.avi # See the size difference! du -m foo.* 1701 foo.avi 6427 foo.mpg The crop numbers (to remove black bands around the movie) can vary per film. Use the -cropdetect option of mplayer to figure out the right numbers to use. Roland --=20 R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) --FL5UXtIhxfXey3p5 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (FreeBSD) iEYEARECAAYFAkpKTDUACgkQEnfvsMMhpyU84ACdHMjhIFe59EVpcZtJYljy6HkK NiMAnRJ+9ftb3u3vjufRBFmWoc2Tm6s0 =dSi+ -----END PGP SIGNATURE----- --FL5UXtIhxfXey3p5--