cvs policy entry about security

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@3825 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

doc/ffmpeg-doc.texi

@@ -1124,6 +1124,10 @@ please use av_log() instead.
 
     Never revert changes made a long time ago or buggy code. Fix it in the
     normal way instead.
+@item
+    Never write to not allocated memory, never write over the end of arrays, 
+    always check values read from some untrusted source before using them as index
+    into an array or otherwise risky things.
 @end enumerate
 
 We think our rules are not too hard. If you have comments, contact us.