Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Filter potentially dangerous environment variables passed from

Browse Source 
telnet client.
This commit is contained in:
ghudson 1995-10-18 05:44:26 +00:00
parent 4ce3968c57
commit 070618219e
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
libexec/telnetd/state.c
View File

@ -33,7 +33,7 @@
#ifndef lint
/* from: static char sccsid[] = "@(#)state.c 8.1 (Berkeley) 6/4/93"; */
static char *rcsid = "$Id: state.c,v 1.5 1994/02/25 03:20:54 cgd Exp $";
static char *rcsid = "$Id: state.c,v 1.6 1995/10/18 05:44:26 ghudson Exp $";
#endif /* not lint */
#include "telnetd.h"
@ -1388,10 +1388,14 @@ suboption()
case NEW_ENV_VAR:
case ENV_USERVAR:
*cp = '\0';
if (valp)
(void)setenv(varp, valp, 1);
else
unsetenv(varp);
if (strcmp(varp, "LD_LIBRARY_PATH") != 0 &&
strcmp(varp, "LD_PRELOAD") != 0 &&
strcmp(varp, "IFS") != 0) {
if (valp)
(void)setenv(varp, valp, 1);
else
unsetenv(varp);
}
cp = varp = (char *)subpointer;
valp = 0;
break;