[Development] Modify QLibraryInfo to support any default location of qt.conf

André Somers andre at familiesomers.nl
Fri Jan 29 09:04:44 CET 2016



Op 28/01/2016 om 13:00 schreef Maximilian Hrabowski:
>> Why isn't this first ?
>> I would generally expect an environment variable to take precedence over
>> all other configuration options except command-line options.
> You are right, that an environment variable should be considered first. But I think one of the three possible solutions is enough. I did not mean to implement all three in this order. For me the environment variable is the solution that i like least.
>
Wouldn't that open up a can of worms in terms of security of the 
application? If setting an environment variable is enough to change what 
libs get loaded and you can point to arbitrary different libs, that 
means injecting your own code in other peoples applications becomes 
really easy, right? I think you could use that to get rights escalation.

André




More information about the Development mailing list