Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-01-15 | treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH | Anders Kaseorg | |
Naive concatenation of $LD_LIBRARY_PATH can result in an empty colon-delimited segment; this tells glibc to load libraries from the current directory, which is definitely wrong, and may be a security vulnerability if the current directory is untrusted. (See #67234, for example.) Fix this throughout the tree. Signed-off-by: Anders Kaseorg <andersk@mit.edu> | |||
2019-07-15 | libstrangle: init at 2017-02-22 | Kirill Boltaev | |