discomfitor pushed a commit to branch enlightenment-0.20.
http://git.enlightenment.org/core/enlightenment.git/commit/?id=cf0d1eba9c59e0f670987f106ab9e27efa756964
commit cf0d1eba9c59e0f670987f106ab9e27efa756964
Author: Mike Blumenkrantz <zm...@osg.samsung.com>
Date: Mon Feb 29 08:23:59 2016 -0500
remove security hole in e_start_main
if a file called ~/.e-mtrack existed then during startup the launcher would
read the first line of this file and set LD_PRELOAD to that value
CID 1039785
---
src/bin/e_start_main.c | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/bin/e_start_main.c b/src/bin/e_start_main.c
index 90130b8..999693f 100644
--- a/src/bin/e_start_main.c
+++ b/src/bin/e_start_main.c
@@ -613,13 +613,13 @@ main(int argc, char **argv)
}
putchar('\n');
- /* mtrack memory tracker support */
home = getenv("HOME");
if (home)
{
- FILE *f;
const char *tmps;
-
+#if 0
+ FILE *f;
+ /* mtrack memory tracker support */
/* if you have ~/.e-mtrack, then the tracker will be enabled
* using the content of this file as the path to the mtrack.so
* shared object that is the mtrack preload */
@@ -643,7 +643,7 @@ main(int argc, char **argv)
}
fclose(f);
}
-
+#endif
tmps = getenv("XDG_DATA_HOME");
if (tmps)
snprintf(buf, sizeof(buf), "%s/Applications/.bin", tmps);
--
