From 960cb9a7db1950ad1414f70b0e3ec240542601ac Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Thu, 2 Oct 2014 08:21:28 +0200 Subject: common: Use secure_getenv() implementation when setuid In anything security sensitive, use secure_getenv() implementation for retrieving environment variables. --- common/debug.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'common/debug.c') diff --git a/common/debug.c b/common/debug.c index 1fbdc7f..47933fa 100644 --- a/common/debug.c +++ b/common/debug.c @@ -36,6 +36,7 @@ #include "config.h" +#include "compat.h" #include "debug.h" #include @@ -76,7 +77,7 @@ parse_environ_flags (void) const char *q; int i; - env = getenv ("P11_KIT_STRICT"); + env = secure_getenv ("P11_KIT_STRICT"); if (env && env[0] != '\0') debug_strict = true; -- cgit v1.1