From 68536096c87890d8ebab1b9c9f0791cf9948e681 Mon Sep 17 00:00:00 2001 From: Ulrich Drepper Date: Mon, 3 May 1999 18:16:18 +0000 Subject: Update. * elf/dl-load.c (expand_dynamic_string_token): Don't expand $ORIGIN for SUID binaries. --- elf/dl-load.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'elf') diff --git a/elf/dl-load.c b/elf/dl-load.c index d9645e6f54..c1d1d7eede 100644 --- a/elf/dl-load.c +++ b/elf/dl-load.c @@ -161,7 +161,9 @@ expand_dynamic_string_token (struct link_map *l, const char *s) { size_t len = 1; - if (((strncmp (&sf[1], "ORIGIN", 6) == 0 && (len = 7) != 0) + /* $ORIGIN is not expanded for SUID/GUID programs. */ + if (((!__libc_enable_secure + && strncmp (&sf[1], "ORIGIN", 6) == 0 && (len = 7) != 0) || (strncmp (&sf[1], "PLATFORM", 8) == 0 && (len = 9) != 0)) && (s[len] == '\0' || s[len] == '/' || s[len] == ':')) ++cnt; @@ -209,7 +211,8 @@ expand_dynamic_string_token (struct link_map *l, const char *s) const char *repl; size_t len; - if (((strncmp (&s[1], "ORIGIN", 6) == 0 && (len = 7) != 0) + if (((!__libc_enable_secure + && strncmp (&s[1], "ORIGIN", 6) == 0 && (len = 7) != 0) || (strncmp (&s[1], "PLATFORM", 8) == 0 && (len = 9) != 0)) && (s[len] == '\0' || s[len] == '/' || s[len] == ':')) { -- cgit 1.4.1