Merge changes I59a7c224,I82d28654

* changes:
  Don't honor LIBC_HOOKS_ENABLE across a security boundary
  Don't honor LD_CONFIG_FILE across security transitions
This commit is contained in:
Treehugger Robot 2019-04-26 21:15:28 +00:00 committed by Gerrit Code Review
commit 70f090e4e8

View file

@ -232,6 +232,7 @@ static bool __is_unsafe_environment_variable(const char* name) {
"LD_AOUT_LIBRARY_PATH", "LD_AOUT_LIBRARY_PATH",
"LD_AOUT_PRELOAD", "LD_AOUT_PRELOAD",
"LD_AUDIT", "LD_AUDIT",
"LD_CONFIG_FILE",
"LD_DEBUG", "LD_DEBUG",
"LD_DEBUG_OUTPUT", "LD_DEBUG_OUTPUT",
"LD_DYNAMIC_WEAK", "LD_DYNAMIC_WEAK",
@ -242,6 +243,7 @@ static bool __is_unsafe_environment_variable(const char* name) {
"LD_SHOW_AUXV", "LD_SHOW_AUXV",
"LD_USE_LOAD_BIAS", "LD_USE_LOAD_BIAS",
"LIBC_DEBUG_MALLOC_OPTIONS", "LIBC_DEBUG_MALLOC_OPTIONS",
"LIBC_HOOKS_ENABLE",
"LOCALDOMAIN", "LOCALDOMAIN",
"LOCPATH", "LOCPATH",
"MALLOC_CHECK_", "MALLOC_CHECK_",