cvs policy entry about security

Originally committed as revision 3825 to svn://svn.ffmpeg.org/ffmpeg/trunk

diff --git a/doc/ffmpeg-doc.texi b/doc/ffmpeg-doc.texi
index 110f9acded75eef9bf965b8864b3404c464f1d48..eb2f6643731ee135028498b207122edcab13b245 100644 (file)
--- a/doc/ffmpeg-doc.texi
+++ b/doc/ffmpeg-doc.texi
@@ -1124,6 +1124,10 @@ please use av_log() instead.
 
     Never revert changes made a long time ago or buggy code. Fix it in the
     normal way instead.
+@item
+    Never write to not allocated memory, never write over the end of arrays, 
+    always check values read from some untrusted source before using them as index
+    into an array or otherwise risky things.
 @end enumerate
 
 We think our rules are not too hard. If you have comments, contact us.