GNU bug report logs - #33831
Gstreamer registry contains store references

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 21 Dec 2018 18:34:48 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Dec 21 13:34:48 2018
Received: from localhost ([127.0.0.1]:58777 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gaPdH-0004sy-QX
	for submit <at> debbugs.gnu.org; Fri, 21 Dec 2018 13:34:47 -0500
Received: from eggs.gnu.org ([208.118.235.92]:60007)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rekado@HIDDEN>) id 1gaPdD-0004sg-VL
 for submit <at> debbugs.gnu.org; Fri, 21 Dec 2018 13:34:44 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rekado@HIDDEN>) id 1gaPd7-00057E-UZ
 for submit <at> debbugs.gnu.org; Fri, 21 Dec 2018 13:34:38 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled
 version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:59558)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <rekado@HIDDEN>) id 1gaPd3-00054w-4Y
 for submit <at> debbugs.gnu.org; Fri, 21 Dec 2018 13:34:34 -0500
Received: from eggs.gnu.org ([2001:4830:134:3::10]:41371)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <rekado@HIDDEN>) id 1gaPd2-00059M-ET
 for bug-guix@HIDDEN; Fri, 21 Dec 2018 13:34:33 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rekado@HIDDEN>) id 1gaPcz-00052y-6t
 for bug-guix@HIDDEN; Fri, 21 Dec 2018 13:34:32 -0500
Received: from sender-of-o53.zoho.com ([135.84.80.218]:21836)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <rekado@HIDDEN>) id 1gaPcw-00050S-TL
 for bug-guix@HIDDEN; Fri, 21 Dec 2018 13:34:27 -0500
ARC-Seal: i=1; a=rsa-sha256; t=1545374861; cv=none; d=zoho.com; s=zohoarc; 
 b=Y9lb9PIjcDbinm1QdUUuhZmbvRo35ejZ56MqNYGQdgA6ZxJnQftq7F4BDKGPHwQGBR84O54dzhpXHdoew/qELU8+CPag1TxZTZJ55Y4mbASfqcn0g419JbfHIcxApSLORe3JqOapZlz3yk4jefqvFp83nIBG7UJ2PzuWnbz4MSU=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com;
 s=zohoarc; t=1545374861;
 h=Content-Type:Content-Transfer-Encoding:Date:From:MIME-Version:Message-ID:Subject:To:ARC-Authentication-Results;
 bh=kKW/sH1W1vmMej7/ILyX71meSAYC2ZlbWlayvbBrwd8=; 
 b=l0QeYG1a/EwIIey1QzCkycHjld4aylkTGY4AoEUcL6ezwd0lpFeGpi5MAk1vuH3lORM8c92zDlZTUyzmkLqhxEfkouLK16UWEPwyH5lK1KNjbWdlQPkaXtfb27M196P8u+aEJ+8vovQiW6I2OVOyr1+B/cEYnIw3tc6U7bSJJho=
ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass  header.i=elephly.net;
 spf=pass  smtp.mailfrom=rekado@HIDDEN;
 dmarc=pass header.from=<rekado@HIDDEN> header.from=<rekado@HIDDEN>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1545374861; 
 s=zoho; d=elephly.net; i=rekado@HIDDEN;
 h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
 l=818; bh=kKW/sH1W1vmMej7/ILyX71meSAYC2ZlbWlayvbBrwd8=;
 b=FwY4AoJ5xtT8sNIp6IVtYP5kXRyk6DnLfVuqnFjJoOde7DzTucBYMQW6EeqXo/W6
 sFahV3SlfB+MZnElp8Jv1sXE8X8E7On84wJ2Z/N2+74Ukn8lxP4/nIoG0+fFlYdK/sP
 DeZG68e1rySj8B1awaaf26gj0+D4xku0CTWzuTHU=
Received: from localhost (p578E7FDA.dip0.t-ipconnect.de [87.142.127.218]) by
 mx.zohomail.com with SMTPS id 1545374859154307.04223614708906;
 Thu, 20 Dec 2018 22:47:39 -0800 (PST)
User-agent: mu4e 1.0; emacs 26.1
From: Ricardo Wurmus <rekado@HIDDEN>
To: bug-guix@HIDDEN
Subject: Gstreamer registry contains store references
X-URL: https://elephly.net
X-PGP-Key: https://elephly.net/rekado.pubkey
X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
Date: Fri, 21 Dec 2018 07:47:34 +0100
Message-ID: <87a7kzs7eh.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-ZohoMailClient: External
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
 [fuzzy]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

The Gstreamer framework generates a binary registry of discovered
plugins in ~/.cache/gstreamer-1.0/registry.ARCH.bin (where ARCH is the
CPU architecture).

This cache contains references to store items.  Since the registry is
not under the control of Guix it may go stale, causing Gstreamer to use
old (and potentially vulnerable) plugins.  A user may delete the
registry as it will be recreated automatically.

We should aim to build the registry in a profile hook.  According to the
gst-launch man page, the GST_REGISTRY environment variable can be used
to override the defautl location of the registry file.  When the
GST_REGISTRY_UPDATE variable is set to =E2=80=9Cno=E2=80=9D, Gstreamer won=
=E2=80=99t attempt to
update the registry.

--
Ricardo


PS: IBus has the same problem.  See bug 22707.