[PATCH] tzset robustness [BZ#17715]

[Rich Felker]

On Thu, Jan 22, 2015 at 10:54:57AM +0100, Florian Weimer wrote:
> On 01/20/2015 05:01 PM, Paul Eggert wrote:
> > Florian Weimer wrote:
> >> This seems to suggest that the glibc behavior is non-compliant.
> > 
> > No, because POSIX reserves the environment variable name TZDIR for the
> > implementation (just as it reserves all upper-case-only names).
> 
> Hmm. Does that mean that scrubbing TZ and TZDIR in AT_SECURE mode would
> also be compliant?

No. Silently removing or modifying env vars is never compliant.

Rich