Call clean_env very early in main() for paranoia's sake. Idea from

Marc Esipovich.

1 files changed, 3 insertions, 2 deletions

diff --git a/sudo.c b/sudo.c
index 0580720a2..903e742c2 100644
--- a/sudo.c
+++ b/sudo.c
@@ -193,6 +193,9 @@ main(argc, argv)
 # endif
 #endif /* HAVE_GETPRPWNAM && HAVE_SET_AUTH_PARAMETERS */
 
+    /* Get rid of any nasty bits in the environment. */
+    clean_env(environ, badenv_table);
+
     Argv = argv;
     Argc = argc;
 
@@ -272,8 +275,6 @@ main(argc, argv)
     if (user_cmnd == NULL && NewArgc == 0)
 	usage(1);
 
-    clean_env(environ, badenv_table);
-
     cmnd_status = init_vars(sudo_mode);
 
     /* At this point, ruid == euid == 0 */