1510671 - Security Warning: load used to dynamically load code

Status: RESOLVED FIXED

(GeckoView :: General, enhancement, P5)

Description

[Emily Toop (:fluffyemily)]

Dynamically loading code from locations other than the application's library directory or the Android platform's built-in library directories is dangerous, as there is an increased risk that the code could have been tampered with. Applications should use loadLibrary when possible, which provides increased assurance that libraries are loaded from one of these safer locations. Application developers should use the features of their development environment to place application native libraries into the lib directory of their compiled APKs.

Affected Class:

GeckoLoader

Comment 1

[Chris Peterson [:cpeterson]]

Enhancements should have severity N/A.

Comment 2

[:Gela]

Attachment: Bug 1510671 - use loadLibrary instead of load()

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e1ef5539edc2
use loadLibrary instead of load() r=geckoview-reviewers,boek,calu

Comment 4

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/e1ef5539edc2