[Development] Modify QLibraryInfo to support any default location of qt.conf
André Somers
andre at familiesomers.nl
Fri Jan 29 09:04:44 CET 2016
Op 28/01/2016 om 13:00 schreef Maximilian Hrabowski:
>> Why isn't this first ?
>> I would generally expect an environment variable to take precedence over
>> all other configuration options except command-line options.
> You are right, that an environment variable should be considered first. But I think one of the three possible solutions is enough. I did not mean to implement all three in this order. For me the environment variable is the solution that i like least.
>
Wouldn't that open up a can of worms in terms of security of the
application? If setting an environment variable is enough to change what
libs get loaded and you can point to arbitrary different libs, that
means injecting your own code in other peoples applications becomes
really easy, right? I think you could use that to get rights escalation.
André
More information about the Development
mailing list