diff options
author | Kieran Bingham <kieran.bingham@ideasonboard.com> | 2019-03-22 10:00:44 +0000 |
---|---|---|
committer | Kieran Bingham <kieran.bingham@ideasonboard.com> | 2019-04-03 13:56:31 +0700 |
commit | 88646061e0729863116c9e2d7bfd461b47e450a4 (patch) | |
tree | 1e568676f8b7c042bee52ea7a62d65c3f1eb7d16 /src/libcamera/utils.cpp | |
parent | 0e1a80952524e672ce8ce5eb900740dda2ae9044 (diff) |
libcamera: utils: Use internal secure_getenv() implementation
The secure_getenv() call is not provided by all C libraries. Support
this feature by implementing our own version.
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Kieran Bingham <kieran.bingham@ideasonboard.com>
Diffstat (limited to 'src/libcamera/utils.cpp')
-rw-r--r-- | src/libcamera/utils.cpp | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/src/libcamera/utils.cpp b/src/libcamera/utils.cpp index fae28cee..cd0fd761 100644 --- a/src/libcamera/utils.cpp +++ b/src/libcamera/utils.cpp @@ -42,6 +42,28 @@ const char *basename(const char *path) } /** + * \brief Get an environment variable + * \param[in] name The name of the variable to return + * + * The environment list is searched to find the variable 'name', and the + * corresponding string is returned. + * + * If 'secure execution' is required then this function always returns NULL to + * avoid vulnerabilities that could occur if set-user-ID or set-group-ID + * programs accidentally trust the environment. + * + * \returns A pointer to the value in the environment or NULL if the requested + * environment variable doesn't exist or if secure execution is required. + */ +char *secure_getenv(const char *name) +{ + if (getauxval(AT_SECURE)) + return NULL; + + return getenv(name); +} + +/** * \fn libcamera::utils::make_unique(Args &&... args) * \brief Constructs an object of type T and wraps it in a std::unique_ptr. */ |