3cd8ce3bce
Naive concatenation of $LD_LIBRARY_PATH can result in an empty colon-delimited segment; this tells glibc to load libraries from the current directory, which is definitely wrong, and may be a security vulnerability if the current directory is untrusted. (See #67234, for example.) Fix this throughout the tree. Signed-off-by: Anders Kaseorg <andersk@mit.edu> |
||
---|---|---|
.. | ||
clang | ||
libc++ | ||
bintools.nix | ||
compiler-rt-codesign.patch | ||
compiler-rt.nix | ||
default.nix | ||
fix-test-on-non-x86-like-others.patch | ||
libc++abi.nix | ||
libcxxabi-no-threads.patch | ||
libcxxabi-wasm.patch | ||
libunwind.nix | ||
lld.nix | ||
lldb-procfs.patch | ||
lldb.nix | ||
llvm-outputs.patch | ||
llvm.nix | ||
openmp.nix | ||
sanitizers-nongnu.patch |