| commit | a72c166b6e17aa0f1ab0c84eb3f558a55f00211a | |
| author | Christophe CURIS <christophe.curis@free.fr> | |
| Sat, 17 May 2014 22:56:43 +0000 (18 00:56 +0200) | ||
| committer | Carlos R. Mafra <crmafra@gmail.com> | |
| Sun, 18 May 2014 22:00:16 +0000 (18 23:00 +0100) | ||
| tree | 5a64395fb28fed6e475738fad48641c7f1009197 | treesnapshot (tar.gz zip) |
| parent | 3aae4125888d0f678541e69ba5ad9c051e05a268 | commitdiff |
WUtil: make use of secure_getenv if the function is available
As pointed by Coverity (#50226), the function getenv can return unreliable
data, so if a sensitive application makes uses of the function 'wgethomedir'
or 'wusergnusteppath' we'd better use the GNU function secure_getenv which
ignore environment variable when used in a known critical cases.
Signed-off-by: Christophe CURIS <christophe.curis@free.fr>
As pointed by Coverity (#50226), the function getenv can return unreliable
data, so if a sensitive application makes uses of the function 'wgethomedir'
or 'wusergnusteppath' we'd better use the GNU function secure_getenv which
ignore environment variable when used in a known critical cases.
Signed-off-by: Christophe CURIS <christophe.curis@free.fr>
| WINGs/findfile.c | diffblobblamehistory | |
| WINGs/userdefaults.c | diffblobblamehistory | |
| configure.ac | diffblobblamehistory | |
| m4/windowmaker.m4 | diffblobblamehistory |