Christophe CURIS a72c166b6e WUtil: make use of secure_getenv if the function is available ...

As pointed by Coverity (#50226), the function getenv can return unreliable
data, so if a sensitive application makes uses of the function 'wgethomedir'
or 'wusergnusteppath' we'd better use the GNU function secure_getenv which
ignore environment variable when used in a known critical cases.

Signed-off-by: Christophe CURIS <christophe.curis@free.fr>

2014-05-18 23:00:16 +01:00

14 KiB

Raw Blame History

View Raw