Bug#769716: iceweasel: OpenH264 back in 37, breaks H.264 playback

[Mike Hommey]

On Fri, Apr 03, 2015 at 01:20:25AM +0200, Christoph Anton Mitterer wrote:
> On Fri, 2015-04-03 at 07:13 +0900, Mike Hommey wrote: 
> > If you manually remove the gmp-gmpopenh264 directory somewhere in
> > $HOME/.mozilla, it should get back to normal for you.
> > 
> > With that being said, either with openh264 or without, iceweasel 37
> > plays h264 just fine here (and strangely doesn't even use openh264 when
> > i do enable it).
> More important than the question of whether H264 playback works or not
> is however the question of whether binary code from 3rd party sources is
> injected into a debian system and this thereby potentially compromised.

Did you read my message? Nothing is being downloaded. Iceweasel only
happens to use what was downloaded *before* the original fix in version 34.

> Didn't version 37 also start to include code for MSE? And wasn't that
> also binary proprietary code?

You're mixing acronyms. MSE is not EME.

> So can't we just patch out everything of that cruft from the Debian
> source package?
> Iceweasel should neither container proprietary code, nor blobs or
> downloaded blobs (whether sources may be open for them or not).

And it doesn't.

Mike