[OE-core] [PATCH 02/15] shadow: Backport last change reproducibility
Adrian Bunk
bunk at stusta.de
Tue May 21 05:49:17 UTC 2019
On Mon, May 20, 2019 at 06:43:04PM -0700, Armin Kuster wrote:
>...
> ++#ifdef HAVE_SECURE_GETENV
> ++# define shadow_getenv(name) secure_getenv(name)
> ++# else
> ++# define shadow_getenv(name) getenv(name)
> ++#endif
>...
If I understand the upstream discussion correctly,
combined with the other changes this does create
a security vulnerability in musl builds.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
More information about the Openembedded-core
mailing list