On Mon, May 20, 2019 at 06:43:04PM -0700, Armin Kuster wrote:
>...
> ++#ifdef HAVE_SECURE_GETENV
> ++# define shadow_getenv(name) secure_getenv(name)
> ++# else
> ++# define shadow_getenv(name) getenv(name)
> ++#endif
>...
If I understand the upstream discussion correctly,
combined with the other changes this does create
a security vulnerability in musl builds.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
--
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core
