do not load plugin from the $PWD
authorDebian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)
committerDmitry Shachnev <mitya57@debian.org>
Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=bf131e8d2181b340
Last-Update: 2020-01-30

Gbp-Pq: Name CVE-2020-0569.diff

src/corelib/plugin/qpluginloader.cpp

index 00480198bd8ae4c36abab44357cdc32a06ae6a45..1bb445759453fefb16e659f085a67614143618ce 100644 (file)
@@ -305,7 +305,6 @@ static QString locatePlugin(const QString& fileName)
         paths.append(fileName.left(slash)); // don't include the '/'
     } else {
         paths = QCoreApplication::libraryPaths();
-        paths.prepend(QStringLiteral(".")); // search in current dir first
     }
 
     for (const QString &path : qAsConst(paths)) {