Sandboxed isn't safe
A security review read "safely process untrusted media" and asked the harder question. A sandbox stops escape; it does not stop exhaustion.
Tags
5 pages
Wasm
An encoder on borrowed time
The last US AVC patent expires in November 2027. Until then ffmpeg-wasi's H.264 encoder ships on sufferance, on Cisco's binaries taught to run under WASI.
FFmpeg thinks it has a disk
FFmpeg assumes a disk it can seek around in. Giving it a convincing in-memory filesystem, and testing the behaviour that would hurt most first.
One input, many outputs
afmpeg shipped single input to single output. Adding multi-pad filter graphs and multi-output muxing: one decode, two files, one pass.
The afternoon the agent earned its keep
Adding stream-copy remux to a WebAssembly FFmpeg build, where writing Matroska hung forever and the identical MP4 path did not.
