Environment handling broken in /bin/sh with changes to {get,set,put}env()

Andrey Chernov ache at nagual.pp.ru
Wed Jul 4 18:00:03 UTC 2007


On Wed, Jul 04, 2007 at 12:53:25PM -0500, Sean C. Farley wrote:
> functions.  I am not certain that sh would work even with OpenSolaris
> since it does similar things to environ under the covers.

It surely not works properly on anything excepting BSD due to this habbit.

> I am also actively looking for other potential bugs from this type of
> misuse.  /bin/sh did not show up for me since I did not have LANG (or
> any other locale variable sh cares about) set in my environment.

Don't care about login and su, they use pam_getenvlist() which copies via 
malloc.

-- 
http://ache.pp.ru/


More information about the freebsd-current mailing list