nspluginwrapper icon indicating copy to clipboard operation
nspluginwrapper copied to clipboard

Don't execute code from the plugin in config tool

Open davidben opened this issue 14 years ago • 1 comments

Using dlopen executes some code from it, and distributions run that tool as root. May as well avoid it and find some ELF parsing utilities to check for symbol existence.

davidben avatar Aug 13 '11 20:08 davidben

We're actually much better about this than I thought. I believe only code from assumed wrapper plugins gets executed, so npwrapper.FOO.so and some other things. Some refactoring can probably make this a little better. Main difficulty is that ELF-munging code cannot read data, so it needs to dlopen, but it does so a bit more readily than it should

davidben avatar Aug 17 '11 06:08 davidben