[openssl-dev] [openssl.org #2532] [PATCH] Fix insufficient privilege checking

[Viktor Dukhovni via RT]

> On Feb 4, 2016, at 3:37 PM, Rich Salz via RT <rt at openssl.org> wrote:
> 
> Rather than replacing all the getenv() calls, a simple wrapper like
> OPENSSL_safe_getenv() that includes the issetguid test seems a lot cleaner. And
> the config changes needed to be ported up to master.

Where available, this should use the native safe getenv() interface, rather
than just do issetugid() directly:

   http://man7.org/linux/man-pages/man3/getenv.3.html

-- 
	Viktor.


-------------------------------------------------------------------------
http://rt.openssl.org/Ticket/Display.html?id=2532

Please log in as guest with password guest if prompted