From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Po Lu Newsgroups: gmane.emacs.devel Subject: Re: GStreamer xwidget Date: Thu, 25 Nov 2021 16:13:06 +0800 Message-ID: <87pmqozm99.fsf@yahoo.com> References: <87ee7cq2mu.fsf.ref@yahoo.com> <87ee7cq2mu.fsf@yahoo.com> <87zgpzp80c.fsf@yahoo.com> <87czmvtf68.fsf@gnus.org> <87czmunkmo.fsf@yahoo.com> <8735noajkl.fsf@yahoo.com> <87sfvn5p0j.fsf@yahoo.com> <87v90i4cmc.fsf@yahoo.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="4474"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.60 (gnu/linux) Cc: larsi@gnus.org, emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu Nov 25 09:25:57 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mqA4q-0000yJ-Ss for ged-emacs-devel@m.gmane-mx.org; Thu, 25 Nov 2021 09:25:56 +0100 Original-Received: from localhost ([::1]:50082 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mqA4q-0004mz-0t for ged-emacs-devel@m.gmane-mx.org; Thu, 25 Nov 2021 03:25:56 -0500 Original-Received: from eggs.gnu.org ([209.51.188.92]:37128) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mq9sg-0001oj-0K for emacs-devel@gnu.org; Thu, 25 Nov 2021 03:13:22 -0500 Original-Received: from sonic307-56.consmr.mail.ne1.yahoo.com ([66.163.190.31]:45213) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mq9sd-0001Ks-Ld for emacs-devel@gnu.org; Thu, 25 Nov 2021 03:13:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1637827996; bh=raVtW+kixQp0+KLqYdEXqurKxnwqvyYHVT6qU93+Pnk=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From:Subject:Reply-To; b=FvhjNACi0qJD6vLZICOdIcF5wlZfkl0UumOurPLNxJJdo+6L9j8uViqgVvnHix2hEQkhIQfyCzNALZjA77cKnQfVRJrtC8TBm4rEekvhvGhOyu74pWKLo63ZbqOdUaRgQeep+TIc/fuFXBiuf3zgmhoEwijkFnYz2anasHd9akJwnuZTYZQoRQr+GKxTyOqj1xRXAsbq+w5R+Vfzdea48NUpv/A0vs4MriOeJIJ+Ik/etYhXFfD43xisPJbdQbYOsZO4wctWXW7eO7lFXhhv0nj8Xj+snC6+gShj5yYM5mZyjIlp3xCnwSZdTtXdYltO3hTvVwoCmGAbmM7apzBZrA== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1637827996; bh=GoK9Y9wRYJ63IsRerCtWJSZzUdtSj9oK0H5koXuMpOp=; h=X-Sonic-MF:From:To:Subject:Date:From:Subject; b=Zysbth2LnQVs8jtEos4aahtRBlIO+F6WNeEegNrmUMor9ApVBec1HBBpazkgZ13klMd06mh+5DCysdO4wvZmLvZKZOBeTusmodcdBuTQ3qqyKQ+wLJMXFaDrQhAFZaUKCc7FNb0d/6BYK7SQxBnbdJMquUdyRsQ8gYHnJOihKNvuyWv6BFeN0NpqfSK4PyEBWIhYMkLnbxdrrX1XEiewrQLTXXV1HXWASVtNhRTfNHGM8vTNZPMAB5BHVz46hsNIKmNf/sSLsJsZsDEYhXg4tePKiaQ71UQWEFJyLAijwxsIFSaH/fTaLPTFidcXxNwDPPFTwlmuVDRQiLo9ICoL1Q== X-YMail-OSG: wDVDZQEVM1lty7fmQxmP24yEX6m2rV6uCzeSwbdpNMH.3oYDFeEb_xSqSUaaL5P 3nHptxj3ZzQXGnA8589VHDqSnqGl5ezEeZXcVScBMTUn5rJtkx8aeZa8FV1e.l7g89XYmZ_lDD5Z iI2KGf2HYI6xyR4.S1SXd6IW47EOYFtRPAopgqixMReX9DZvi2i1DAimO7Y6KafhoMNKj76BkRk3 uPGpFQvhUY55ZNQljuvq5ScEWwan42tvFZCKODmuTzEtLS4ABO3VqyHDsNqhVRF12D4JcAdXNTxw bguLSiuX_uoV9kSM1KCWz011ZVC1hE5OnCYNomCP3o3pmflXBF9fbM..4zWmjry9pCJ_YpAcouyj Qmk95DR6dQgBDi_mZOCWb9jRZPQmpe8mvI0P6POX5R5VzA2G6V5QwxZAnDx49Bt6dQUL69sUP3Sa RRRQ8c81INmA7CoapK4ZMMqFF0T7PnztNvPmM1HD6i8cFskh_8XokEpKS.MSHGftAUGZVAALPYDu PCPyNigLseDf_TsI7UZ.C8vWGl5QyIb2v6Ic7sNkH3rTaQrJiQKOzHhnmQVR8JARLCHMtewEKCtd NDbeagpptjsRSwGLO4Ii86iHixb0C0d_NnZHgZsePYDcbQkm9SPlEjeBJFxfJOeYjutsI5YgGBqA frHQJ.6OXaLGERGfo1vD9fxWFBkqjWfEnux8oHNQuHk0A7r9vlr4AaB5vngZmMaFOZSy6siofq2r llL5xNS8zs.pmJsxKjhwNqPAxDOmVrIYGRuFKAlW33GYn3YHmXC0gwji5nVC1m5027UErEOcTZ.X 3SI2ucnSQTsHoVHLGxPBrDdvLp25UN5upzb8sMmhmX X-Sonic-MF: Original-Received: from sonic.gate.mail.ne1.yahoo.com by sonic307.consmr.mail.ne1.yahoo.com with HTTP; Thu, 25 Nov 2021 08:13:16 +0000 Original-Received: by kubenode515.mail-prod1.omega.sg3.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID b15a1ff6e7c7e63fbd65681b9b03706e; Thu, 25 Nov 2021 08:13:10 +0000 (UTC) In-Reply-To: (Richard Stallman's message of "Thu, 25 Nov 2021 00:32:57 -0500") X-Mailer: WebService/1.1.19306 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Received-SPF: pass client-ip=66.163.190.31; envelope-from=luangruo@yahoo.com; helo=sonic307-56.consmr.mail.ne1.yahoo.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:280079 Archived-At: Richard Stallman writes: > > As GStreamer doesn't load plugins by yourself, you do so by making sure > > to only pass good plugin names to the element factory. > We're starting to close in on the crucial point. > Can you show me the code Emacs would use to control which plug-ins are > permitted? In other words, how does a program "pass plug-in names" > to the element factory? In the function call to `gst_element_factory_make'. We would have to verify that the first argument, a C string, names a plugin included in `gst-plugins-base' or `gst-plugins-good'. > Does the program need to pass the list of good plug-in names? No, it only has to refrain from passing a string that names a plugin that is not free software to `gst_element_factory_make'. > I'm trying to do a kind of security analysis of this. Does passing > the right list of plug-in names depend on the cooperation of other > projects? The GStreamer developers, who overlap greatly with other Freedesktop.org projects. > If so, which ones, and how would Emacs interact with them? I want to > make sure we are not volunerable to misbehavior on their part. We would have to make sure that, when we decide to use a plugin in Emacs, that it is part of `gst-plugins-base' or `gst-plugins-good'. > If we'd need to trust some people, who are they, and what concretely > would we need to trust them to do? We would have to trust them to place only free plugins in `gst-plugins-good' and `gst-plugins-base', and to document the plugins correctly. Thanks.