Zap all env vars beginning with PYTHON to prevent an obvious form of attack.

80eb3c02 · Guido van Rossum · b5dc5e3d · 80eb3c02
Commit 80eb3c02 authored Mar 11, 1997 by Guido van Rossum
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

Misc/setuid-prog.c Misc/setuid-prog.c +2 -0

No files found.
--- a/Misc/setuid-prog.c
+++ b/Misc/setuid-prog.c
@@ -105,6 +105,8 @@ clean_environ(void)
 			**p = 'X';
 		else if (strncmp(*p, "_RLD", 4) == 0)
 			**p = 'X';
+		else if (strncmp(*p, "PYTHON", 6) == 0)
+			**p = 'X';
 		else if (strncmp(*p, "IFS=", 4) == 0)
 			*p = def_IFS;
 		else if (strncmp(*p, "CDPATH=", 7) == 0)