1 files changed, 8 insertions, 2 deletions
diff --git a/elf/rtld.c b/elf/rtld.c
index b41a90f..f358700 100644
--- a/elf/rtld.c
+++ b/elf/rtld.c
@@ -1324,9 +1324,15 @@ process_envvars (enum mode *modep, int *lazyp)
 
   while ((envline = _dl_next_ld_env_entry (&runp)) != NULL)
     {
-      size_t len = strcspn (envline, "=") - 3;
+      size_t len = strcspn (envline, "=");
 
-      switch (len)
+      if (envline[len] != '=')
+	/* This is a "LD_" variable at the end of the string without
+	   a '=' character.  Ignore it since otherwise we will access
+	   invalid memory below.  */
+	break;
+
+      switch (len - 3)
 	{
 	case 4:
 	  /* Warning level, verbose or not.  */