Remove all getenv() calls, especially those wrapped by issetugid().
authorderaadt <deraadt@openbsd.org>
Sat, 11 Apr 2015 16:03:21 +0000 (16:03 +0000)
committerderaadt <deraadt@openbsd.org>
Sat, 11 Apr 2015 16:03:21 +0000 (16:03 +0000)
commit920ccb623f2ff40701397bf8b898c6ebdf3a73a1
tree42f30243fc29ec194cff8931d1faf2328e35f8bb
parentab2cf38e6b2b6b7bd3289ac5cad22aa89d748bd6
Remove all getenv() calls, especially those wrapped by issetugid().
getenv()'s wrapped by issetugid() are safe, but issetugid() is correct
difficult to impliment on many operating systems.  By accident, a grand
experiment was run over the last year, where issetugid() returned 1 (the
safe value) on a few operating systems.  Noone noticed & complained that
certain environment variables were not working.......
ok doug beck jsing, discussion with others
13 files changed:
lib/libcrypto/conf/conf_api.c
lib/libcrypto/conf/conf_mod.c
lib/libcrypto/engine/eng_list.c
lib/libcrypto/x509/by_dir.c
lib/libcrypto/x509/by_file.c
lib/libcrypto/x509/x509_vfy.c
lib/libssl/src/crypto/conf/conf_api.c
lib/libssl/src/crypto/conf/conf_mod.c
lib/libssl/src/crypto/engine/eng_list.c
lib/libssl/src/crypto/x509/by_dir.c
lib/libssl/src/crypto/x509/by_file.c
lib/libssl/src/crypto/x509/x509_vfy.c
lib/libssl/src/doc/apps/config.pod