[Development] Modify QLibraryInfo to support any default location of qt.conf

[Koehne Kai]

> -----Original Message-----
> From: Development [mailto:development-bounces at qt-project.org] On
> Behalf Of Andre Somers
> Sent: Friday, January 29, 2016 9:05 AM
> To: development at qt-project.org
> Subject: Re: [Development] Modify QLibraryInfo to support any default
> location of qt.conf
> 
> 
> 
> Op 28/01/2016 om 13:00 schreef Maximilian Hrabowski:
> >> Why isn't this first ?
> >> I would generally expect an environment variable to take precedence
> >> over all other configuration options except command-line options.
> > You are right, that an environment variable should be considered first. But
> I think one of the three possible solutions is enough. I did not mean to
> implement all three in this order. For me the environment variable is the
> solution that i like least.
> >
> Wouldn't that open up a can of worms in terms of security of the
> application? If setting an environment variable is enough to change what
> libs get loaded and you can point to arbitrary different libs, that means
> injecting your own code in other peoples applications becomes really easy,
> right? I think you could use that to get rights escalation.

The can is already open in this case. You can set PATH, LD_LIBRARY_PATH, QML_IMPORT_PATH ....

Regards

Kai