[PATCH] Add LD_PRELOAD_INIT_EARLY [BZ #14379]
Joseph Myers
joseph@codesourcery.com
Thu Feb 14 17:43:00 GMT 2019
This patch is missing a NEWS update to discuss the new feature. (It seems
the manual generally lacks documentation of LD_* variables; if they were
documented, an update there would be needed as well.)
The commit message needs to discuss security issues (that applies to any
proposed change to glibc that makes its behavior depend on some
environment variable, probably we should add that point to the
contribution checklist). What effect does this have in setuid programs?
Is it ignored, by existing or new code? If not ignored, how can you
demonstrate that to be safe in all cases where LD_PRELOAD is handled and
safe for such programs?
(To confirm for anyone else looking at the patch: there is an FSF
copyright assignment on file from Axis Communications, for a list of
projects including glibc, dated 1999-05-28.)
--
Joseph S. Myers
joseph@codesourcery.com
More information about the Libc-alpha
mailing list