3cd8ce3bce
Naive concatenation of $LD_LIBRARY_PATH can result in an empty colon-delimited segment; this tells glibc to load libraries from the current directory, which is definitely wrong, and may be a security vulnerability if the current directory is untrusted. (See #67234, for example.) Fix this throughout the tree. Signed-off-by: Anders Kaseorg <andersk@mit.edu> |
||
---|---|---|
.. | ||
clang-5-darwin.patch | ||
default.nix | ||
dlopen-absolute-paths.diff | ||
dlopen-gtkstyle.diff | ||
dlopen-webkit-nsplugin.diff | ||
glib-2.32.patch | ||
kill-legacy-darwin-apis.patch | ||
libressl.patch | ||
parallel-configure.patch | ||
patch-qthread-stacksize.diff | ||
qmake-hook.sh | ||
qsettings-recursive-global-mutex.patch | ||
qt4-gcc6.patch | ||
qt4-openssl-1.1.patch | ||
qt-4.8.7-unixmake-darwin.patch | ||
qt-musl-iconv-no-bom.patch | ||
qt-musl.patch |