This is the mail archive of the
glibc-bugs@sources.redhat.com
mailing list for the glibc project.
[Bug libc/384] New: bad handling of UNSECURE_ENVVARS in _dl_non_dynamic_init()
- From: "peak at argo dot troja dot mff dot cuni dot cz" <sourceware-bugzilla at sources dot redhat dot com>
- To: glibc-bugs at sources dot redhat dot com
- Date: 14 Sep 2004 16:40:02 -0000
- Subject: [Bug libc/384] New: bad handling of UNSECURE_ENVVARS in _dl_non_dynamic_init()
- Reply-to: sourceware-bugzilla at sources dot redhat dot com
The code in _dl_non_dynamic_init() in elf/dl-support.c still thinks
UNSECURE_ENVVARS and EXTRA_UNSECURE_ENVVARS are the list of char * even if they
are a concatenation of strings nowadays. Compare the code to the corresponding
code in process_envvars() in elf/rtld.c.
This breaks "environment laudering" in statically linked programs.
--
Summary: bad handling of UNSECURE_ENVVARS in
_dl_non_dynamic_init()
Product: glibc
Version: 2.3.3
Status: NEW
Severity: normal
Priority: P2
Component: libc
AssignedTo: gotom at debian dot or dot jp
ReportedBy: peak at argo dot troja dot mff dot cuni dot cz
CC: glibc-bugs at sources dot redhat dot com
http://sources.redhat.com/bugzilla/show_bug.cgi?id=384
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.