[vlc-devel] [PATCH] modules: bank: Save the cache if it was empty

Rémi Denis-Courmont remi at remlab.net
Wed May 18 20:55:31 CEST 2016

On Wednesday 18 May 2016 20:28:19 Hugo Beauzée-Luyssen wrote:
> This aims at fixing an issue with some libvlc issues, that wouldn't have
> a plugin cache if they don't rely on a VLC player installation (since we
> generate the cache upon install time)

That would be a bug in the app installer though. There are several issues with 
writing the cache when we would not normally need to.

First, we do not necessarily want to trust random LibVLC apps to generate a 
cache that would be shared with VLC and other apps. There are plenty of subtle 
and less subtle ways to screw up the environment while the plugins bank is 

More importantly (and more likely), I fear that this creates security 
violations if the user is not allowed to write to application directory. At 
best, that is just a permission denied error, but at worst, the process gets 
killed or the user sees nasty warnings.

Rémi Denis-Courmont

More information about the vlc-devel mailing list