ilusha/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython synced 2026-09-29 12:10:30 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Zap all env vars beginning with PYTHON to prevent an obvious form of attack.

Browse source
This commit is contained in:
Guido van Rossum 1997-03-11 18:24:21 +00:00
parent b5dc5e3d7e
commit 80eb3c0202
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Misc/setuid-prog.c
View file

@ -105,6 +105,8 @@ clean_environ(void)
**p = 'X'; **p = 'X';
else if (strncmp(*p, "_RLD", 4) == 0) else if (strncmp(*p, "_RLD", 4) == 0)
**p = 'X'; **p = 'X';
else if (strncmp(*p, "PYTHON", 6) == 0)
**p = 'X';
else if (strncmp(*p, "IFS=", 4) == 0) else if (strncmp(*p, "IFS=", 4) == 0)
*p = def_IFS; *p = def_IFS;
else if (strncmp(*p, "CDPATH=", 7) == 0) else if (strncmp(*p, "CDPATH=", 7) == 0)