[vlc-devel] [PATCH] lua: add option to allow loading extension at startup

[Rémi Denis-Courmont]

Le 17 octobre 2017 17:19:47 GMT+02:00, pierre <pierre at videolabs.io> a écrit :
>> Great way to drive VLC installation into unrecoverable state. Sorry
>but
>> until the promise to insulate the VLC runtime and UI from the
>extension is
>> acted on (I lost count of the years) this patch is unacceptable from
>safety
>> and security perspective.
>
>Would add change_volatile() to the option be acceptable in safety
>perspective?
> 
>-- 
>Pierre Lamot
>_______________________________________________
>vlc-devel mailing list
>To unsubscribe or modify your subscription options:
>https://mailman.videolan.org/listinfo/vlc-devel

That only makes sense and solves the concern if we accept that UAC is NOT a security feature nor a security boundary. And then, there are a bunch of "Security fixes" that this invalidates.
-- 
Envoyé de mon appareil Android avec Courriel K-9 Mail. Veuillez excuser ma brièveté.