traverseda
/
cpython
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Zap all env vars beginning with PYTHON to prevent an obvious form of attack.

This commit is contained in:
Guido van Rossum 1997-03-11 18:24:21 +00:00
parent b5dc5e3d7e
commit 80eb3c0202
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Misc/setuid-prog.c
View File

@ -105,6 +105,8 @@ clean_environ(void)
**p = 'X';
else if (strncmp(*p, "_RLD", 4) == 0)
**p = 'X';
else if (strncmp(*p, "PYTHON", 6) == 0)
**p = 'X';
else if (strncmp(*p, "IFS=", 4) == 0)
*p = def_IFS;
else if (strncmp(*p, "CDPATH=", 7) == 0)