diff options
author | Karl Williamson <khw@cpan.org> | 2015-03-09 11:14:19 -0600 |
---|---|---|
committer | Karl Williamson <khw@cpan.org> | 2015-03-09 13:53:03 -0600 |
commit | 9e0b0d62ba5a660ab4b6f498912cfaead79014a0 (patch) | |
tree | a45bc21b4760a2e0316ceabc2bcc33c8819c08d7 /dist | |
parent | 2cc6a9db5a91276f3ff662b3e5befa6799fde3ed (diff) | |
download | perl-9e0b0d62ba5a660ab4b6f498912cfaead79014a0.tar.gz |
perl.c: Don't read possibly zapped memory
See https://rt.perl.org/Ticket/Display.html?id=123748
The return of getenv() is a pointer to static storage which can legally
be overwritten at any time by other calls to access the environment,
even even another getenv(). (What actually happens varies from platform
to platform.) Results of getenv() therefore either have to be acted on
immediately or copied to a safe area. This commit does the latter for
this call in perl.c. The static area was being held on to even into the
function call moreswitches() which does environmen handling, so was
vulnerable to this bug.
Diffstat (limited to 'dist')
0 files changed, 0 insertions, 0 deletions