From 80eb3c02027b435ef1f0eaaa1406b43dd6eebaeb Mon Sep 17 00:00:00 2001
From: Guido van Rossum <guido@python.org>
Date: Tue, 11 Mar 1997 18:24:21 +0000
Subject: [PATCH] Zap all env vars beginning with PYTHON to prevent an obvious
 form of attack.

---
 Misc/setuid-prog.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Misc/setuid-prog.c b/Misc/setuid-prog.c
index 6f25493cca9..b49438a1c67 100644
--- a/Misc/setuid-prog.c
+++ b/Misc/setuid-prog.c
@@ -105,6 +105,8 @@ clean_environ(void)
 			**p = 'X';
 		else if (strncmp(*p, "_RLD", 4) == 0)
 			**p = 'X';
+		else if (strncmp(*p, "PYTHON", 6) == 0)
+			**p = 'X';
 		else if (strncmp(*p, "IFS=", 4) == 0)
 			*p = def_IFS;
 		else if (strncmp(*p, "CDPATH=", 7) == 0)