Please check your QProcess/KProcess invokations

Albert Astals Cid aacid at
Mon Jan 31 16:46:19 GMT 2022

QProcess has this ?undocumented? feature that when you do QProcess::start("bloblo") it will start bloblo from the current working directory (CWD) if it's there and it's not in PATH (at least on Linux)

To me this is rather surprising and it seems it's the same for everyone since everyone I mention this, is surprised.

Unfortunately this has lead to a relatively nasty issue in ktexteditor/kate has published today in

But we have those programming mistakes in lots of places (probably not as easily exploitable), so I would like to ask everyone to check as many apps as they can when they think that they are using Q/KProcess to make sure we call QStandardPaths::findExecutable before QProcess.

Some examples


P.S: If you don't believe it, here's a test app

More information about the kde-devel mailing list