[vlc-devel] [PATCH] lua: add option to allow loading extension at startup

Rémi Denis-Courmont remi at remlab.net
Tue Oct 17 17:28:42 CEST 2017

Le 17 octobre 2017 17:19:47 GMT+02:00, pierre <pierre at videolabs.io> a écrit :
>> Great way to drive VLC installation into unrecoverable state. Sorry
>> until the promise to insulate the VLC runtime and UI from the
>extension is
>> acted on (I lost count of the years) this patch is unacceptable from
>> and security perspective.
>Would add change_volatile() to the option be acceptable in safety
>Pierre Lamot
>vlc-devel mailing list
>To unsubscribe or modify your subscription options:

That only makes sense and solves the concern if we accept that UAC is NOT a security feature nor a security boundary. And then, there are a bunch of "Security fixes" that this invalidates.
Envoyé de mon appareil Android avec Courriel K-9 Mail. Veuillez excuser ma brièveté.

More information about the vlc-devel mailing list