Merge changes I59a7c224,I82d28654

* changes:
  Don't honor LIBC_HOOKS_ENABLE across a security boundary
  Don't honor LD_CONFIG_FILE across security transitions
This commit is contained in:
Treehugger Robot 2019-04-26 21:15:28 +00:00 committed by Gerrit Code Review
commit 70f090e4e8

View file

@ -232,6 +232,7 @@ static bool __is_unsafe_environment_variable(const char* name) {
"LD_AOUT_LIBRARY_PATH",
"LD_AOUT_PRELOAD",
"LD_AUDIT",
"LD_CONFIG_FILE",
"LD_DEBUG",
"LD_DEBUG_OUTPUT",
"LD_DYNAMIC_WEAK",
@ -242,6 +243,7 @@ static bool __is_unsafe_environment_variable(const char* name) {
"LD_SHOW_AUXV",
"LD_USE_LOAD_BIAS",
"LIBC_DEBUG_MALLOC_OPTIONS",
"LIBC_HOOKS_ENABLE",
"LOCALDOMAIN",
"LOCPATH",
"MALLOC_CHECK_",