summaryrefslogtreecommitdiff
path: root/internal
diff options
context:
space:
mode:
authorLibravatar kim <89579420+NyaaaWhatsUpDoc@users.noreply.github.com>2024-07-16 12:32:48 +0000
committerLibravatar GitHub <noreply@github.com>2024-07-16 13:32:48 +0100
commit401098191b93f512d5253d4634d59bf53b88a052 (patch)
tree7dc1d2cf4b150b74768ce30dc900ad1cd2cc4b5d /internal
parent[feature] more filetype support! (#3107) (diff)
downloadgotosocial-401098191b93f512d5253d4634d59bf53b88a052.tar.xz
give read-only access to /dev for ffmpeg to access /dev/urandom (#3109)
Diffstat (limited to 'internal')
-rw-r--r--internal/media/ffmpeg.go3
1 files changed, 2 insertions, 1 deletions
diff --git a/internal/media/ffmpeg.go b/internal/media/ffmpeg.go
index 53facd15b..add79e26b 100644
--- a/internal/media/ffmpeg.go
+++ b/internal/media/ffmpeg.go
@@ -119,7 +119,8 @@ func ffmpeg(ctx context.Context, dirpath string, args ...string) error {
Stderr: &stderr,
Args: args,
Config: func(modcfg wazero.ModuleConfig) wazero.ModuleConfig {
- fscfg := wazero.NewFSConfig()
+ fscfg := wazero.NewFSConfig() // needs /dev/urandom
+ fscfg = fscfg.WithReadOnlyDirMount("/dev", "/dev")
fscfg = fscfg.WithDirMount(dirpath, dirpath)
modcfg = modcfg.WithFSConfig(fscfg)
return modcfg