diff options
| author |   Siddhesh Poyarekar <siddhesh@sourceware.org> | 2017-03-07 20:52:04 +0530 |
|---|---|---|
| committer |   Andreas K. Hüttel <dilfridge@gentoo.org> | 2017-08-18 23:46:33 +0200 |
| commit | c0f9de764c3252431e29646d4ccb6da430c34469 (patch) | |
| tree | 78b463fe29ef935b1a2849f0bdeb93b90c5c1c46 /config.h.in | |
| parent | Add IS_IN guard to multiarch/IFUNC implementations (diff) | |
| download | glibc-c0f9de764c3252431e29646d4ccb6da430c34469.tar.gz glibc-c0f9de764c3252431e29646d4ccb6da430c34469.tar.bz2 glibc-c0f9de764c3252431e29646d4ccb6da430c34469.zip | |
Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (bug #21209)
The LD_HWCAP_MASK environment variable may alter the selection of
function variants for some architectures. For AT_SECURE process it
means that if an outdated routine has a bug that would otherwise not
affect newer platforms by default, LD_HWCAP_MASK will allow that bug
to be exploited.
To be on the safe side, ignore and disable LD_HWCAP_MASK for setuid
binaries.
[BZ #21209]
* elf/rtld.c (process_envvars): Ignore LD_HWCAP_MASK for
AT_SECURE processes.
* sysdeps/generic/unsecvars.h: Add LD_HWCAP_MASK.
* elf/tst-env-setuid.c (test_parent): Test LD_HWCAP_MASK.
(test_child): Likewise.
* elf/Makefile (tst-env-setuid-ENV): Add LD_HWCAP_MASK.
Diffstat (limited to 'config.h.in')
0 files changed, 0 insertions, 0 deletions