3cd8ce3bce
Naive concatenation of $LD_LIBRARY_PATH can result in an empty colon-delimited segment; this tells glibc to load libraries from the current directory, which is definitely wrong, and may be a security vulnerability if the current directory is untrusted. (See #67234, for example.) Fix this throughout the tree. Signed-off-by: Anders Kaseorg <andersk@mit.edu> |
||
---|---|---|
.. | ||
build-runtime.py | ||
build-wrapped.sh | ||
chrootenv.nix | ||
default.nix | ||
fonts.nix | ||
runtime-generated.nix | ||
runtime-mirror.nix | ||
runtime-wrapped.nix | ||
runtime.nix | ||
steam.nix | ||
steamcmd.nix | ||
steamcmd.sh | ||
update-runtime-shell.nix | ||
update-runtime.py |