[aleden]

Disentangling who loads what without actually running the app, i.e. allowing a sequence of dlopen() calls to succeed, seems impossible to accomplish in the presence of binary code which cannot be effectively scrutinized.

[ReleaseCandidat]

It's not about calling the app itself - that doesn't happen with ldd. ldd does not know about dlopened libraries.

[aleden]

I guess I wasn't sure that DT_NEEDED entries covered everything. Sometimes you have stuff that happens in DT_INIT constructors.