Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 2e5051e2235f
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 3cd8ce3bce1e
Choose a head ref
  • 1 commit
  • 48 files changed
  • 1 contributor

Commits on Jan 15, 2020

  1. treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH 

    Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
    @andersk @FRidh
    andersk authored and FRidh committed Jan 15, 2020
    Copy the full SHA
    3cd8ce3 View commit details
    Browse the repository at this point in the history