[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [GNU-linux-libre] youtube-dl might be running non-free software from

From: Adonay Felipe Nogueira
Subject: Re: [GNU-linux-libre] youtube-dl might be running non-free software from
Date: Wed, 19 Jul 2017 12:05:36 -0300
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux)

It's been a long time since I last programmed in Lua (one of many
languages used by VLC). I know from my limited knowlege on Lua
programming that `()`, `dofile()`, `load()` (older version of
`loadstring()`), `loadfile()` and `loadstring()` can run arbitrary code
in some situations. I also know that `loadfile()` and `loadstring()`
read file and string, respectivelly. But these are only compiled, not
immediatelly run/defined. I had a look at the "youtube.lua" playlist
module, and as far as my blindness allows me to tell, I didn't see it
compiling and executing JS code as Lua code (either through `()`,
`dofile()`, `load()`, `loadfile()` or `loadstring()`).

In youtube-dl's case, it makes use of Python's `lambda` annonymous
functions to run what JSInterpreter returns.

The syntax is:

lambda [List of arguments.]: [Expression/body.]

And also, specifically to JSInterpreter's case, the `call_function`
function that is defined inside it is also allowed to do so.

It's also important to note that there is also the YouTube All HTML 5
extension, and the ViewTube GreaseMonkey userscript. I don't know yet if
they try compiling and/or executing the JS code somehow, but it would be
worth studying/checking.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]