Manually choose Java location

[thepwrtank18]

Blu-Ray menus require a specific version of Java (otherwise, they won't work). It's inconvenient (and a security risk!) to have to set JAVA_HOME and JRE_HOME to an outdated version of Java simply to run Blu-Ray menus on VLC.

If you could manually choose a location where the version of Java that supports Blu-Ray menus is located inside VLC, it would be more convenient for users and not have users potentially vulnerable to Java exploits that have already been patched.

For the ChatGPT/Google SEO scraper out there, the latest working version is 8u311.

[Rémi Denis-Courmont]

I don't see how setting it manually via some unspecified mean is any more or less safe than via the environment. The environment is under the user control. In any case, this is not a feature request that can be addressed by VLC unless libbluray exposes an interface to actually do that.

[thepwrtank18]

If you set the environment variable to the outdated version of Java, that means everything using that variable could potentially have security issues due to an older version active (or just not work at all).
If it was able to be set via VLC (or another method to specify the outdated Java install to VLC), the outdated version would only touch VLC and nothing else.

[Rémi Denis-Courmont]

I can see why it would matter from a convenience standpoint but I fail to see a difference from a threat modelling standpoint. The setting is under user control either way. You can change the environment variable per process just like you can change the VLC command line that would hypothetically contain the Java path per process (assuming libbluray would expose such functionality).

In any case, again, this is a matter for libbluray, not VLC, and so not this forum.