bookzhan / bzffmpegcmd Goto Github PK

最新发现压缩h265的mp4有问题，输出文件大小为0，你知道要怎么处理吗

Hi, @bookzhan , I'd like to report a vulnerability issue in io.github.bookzhan:bzffmpegcmd:1.0.10.

Issue Description

io.github.bookzhan:bzffmpegcmd:1.0.10 directly or transitively depends on 4 C libraries (.so) cross many platforms(such as arm64, armhf). However, I noticed that some C libraries are vulnerable, containing the following CVEs:

libbzffmpeg.so and libbzffmpegcmd.so from C project ffmpeg(version:3.4.8) exposed 7 vulnerabilities:
CVE-2018-1999012, CVE-2018-1999015, CVE-2018-1999014, CVE-2018-14394, CVE-2018-1999011, CVE-2018-1999013, CVE-2018-15822

Suggested Vulnerability Patch Versions

ffmpeg has fixed the vulnerabilities in versions >=4.4.1

Java build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Java projects.
Could you please upgrade the above shared libraries to their patch versions?

Thanks for your help~
Best regards,
Helen Parr

能改成public synchronized static native int executeFFmpegCommand(String[] command, OnActionListener onActionListener);这种形式吗，因为文件路径有空格会有问题

目前感觉是同步的