diff options
| author | Pauli <paul.dale@oracle.com> | 2018-09-24 11:21:18 +1000 |
|---|---|---|
| committer | Pauli <paul.dale@oracle.com> | 2018-09-24 11:21:18 +1000 |
| commit | 5c39a55d04ea6e6f734b627a050b9e702788d50d (patch) | |
| tree | ca64965f2c41af4b4827847753aaf2883e1a840a /crypto/ct | |
| parent | 0f58220973a02248ca5c69db59e615378467b9c8 (diff) | |
| download | openssl-5c39a55d04ea6e6f734b627a050b9e702788d50d.zip openssl-5c39a55d04ea6e6f734b627a050b9e702788d50d.tar.gz openssl-5c39a55d04ea6e6f734b627a050b9e702788d50d.tar.bz2 | |
Use secure_getenv(3) when available.
Change all calls to getenv() inside libcrypto to use a new wrapper function
that use secure_getenv() if available and an issetugid then getenv if not.
CPU processor override flags are unchanged.
Extra checks for OPENSSL_issetugid() have been removed in favour of the
safe getenv.
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/7047)
Diffstat (limited to 'crypto/ct')
| -rw-r--r-- | crypto/ct/ct_log.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/ct/ct_log.c b/crypto/ct/ct_log.c index be6681d..c1bca3e 100644 --- a/crypto/ct/ct_log.c +++ b/crypto/ct/ct_log.c @@ -137,7 +137,7 @@ static int ctlog_new_from_conf(CTLOG **ct_log, const CONF *conf, const char *sec int CTLOG_STORE_load_default_file(CTLOG_STORE *store) { - const char *fpath = getenv(CTLOG_FILE_EVP); + const char *fpath = ossl_safe_getenv(CTLOG_FILE_EVP); if (fpath == NULL) fpath = CTLOG_FILE; |