[vlc-devel] Lua extension and vlc.misc

[Jean-Baptiste Kempf]

On Tue, Feb 28, 2012 at 09:03:19PM +0200, Rémi Denis-Courmont wrote :
> version is safe if we assume that Lua extensions are trusted. version is a 
> very nice way to detect security bugs though...

Version is the only current way to test for removed features...

> copyright and license are useless. They were clearly meant for Lua 
> _interfaces_ to provide "About" functionality. An extension will have its own 
> copyrights and will not need these.

Useless, maybe. Dangerous no.

> > > "datadir"
> > > "userdatadir"
> > > "homedir"
> > > "configdir"
> > > "cachedir"
> > > "datadir_list"
> > 
> > Do these contain full paths? (e.g. /home/myname or c:\users\peter.jackson)
> 
> Yes, of course.
> 
> > Because some people might complain about privacy violations, like they did
> > with automatic album art downloads.
> 
> Indeed. Since we do not expose general purpose functions to extensions, 
> extensions cannot access the file system regularly. So there is not much 
> practical use for VLC directories other than to invade the user privacy.

There are very valid uses, at least for cache, to store temporary files.

-- 
Jean-Baptiste Kempf
http://www.jbkempf.com/ - +33 672 704 734
Sent from my Electronic Device