From f6110a8fee2ca36f8e2d2abecf3cba9fa7b8ea7d Mon Sep 17 00:00:00 2001
From: Florian Weimer <fweimer@redhat.com>
Date: Mon, 19 Jun 2017 17:09:55 +0200
Subject: [PATCH] CVE-2017-1000366: Ignore LD_LIBRARY_PATH for AT_SECURE=1
 programs [BZ #21624]

LD_LIBRARY_PATH can only be used to reorder system search paths, which
is not useful functionality.

This makes an exploitable unbounded alloca in _dl_init_paths unreachable
for AT_SECURE=1 programs.

patch from:
https://sourceware.org/git/?p=glibc.git;a=commit;h=f6110a8fee2ca36f8e2d2abecf3cba9fa7b8ea7d
---
 ChangeLog  | 7 +++++++
 elf/rtld.c | 3 ++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/elf/rtld.c b/elf/rtld.c
index 2446a87..2269dbe 100644
--- a/elf/rtld.c
+++ b/elf/rtld.c
@@ -2422,7 +2422,8 @@ process_envvars (enum mode *modep)
 
 	case 12:
 	  /* The library search path.  */
-	  if (memcmp (envline, "LIBRARY_PATH", 12) == 0)
+	  if (!__libc_enable_secure
+	      && memcmp (envline, "LIBRARY_PATH", 12) == 0)
 	    {
 	      library_path = &envline[13];
 	      break;
-- 
2.9.3

'>summary</a><a href='/guix/refs/?id=93e19067b4428e41c281eebe19746ea253591aad'>refs</a><a class='active' href='/guix/log/gnu/packages/guile.scm'>log</a><a href='/guix/tree/gnu/packages/guile.scm?id=93e19067b4428e41c281eebe19746ea253591aad'>tree</a><a href='/guix/commit/gnu/packages/guile.scm?id=93e19067b4428e41c281eebe19746ea253591aad'>commit</a><a href='/guix/diff/gnu/packages/guile.scm?id=93e19067b4428e41c281eebe19746ea253591aad'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/guile.scm'>
<input type='hidden' name='id' value='93e19067b4428e41c281eebe19746ea253591aad'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=93e19067b4428e41c281eebe19746ea253591aad'>root</a>/<a href='/guix/log/gnu?id=93e19067b4428e41c281eebe19746ea253591aad'>gnu</a>/<a href='/guix/log/gnu/packages?id=93e19067b4428e41c281eebe19746ea253591aad'>packages</a>/<a href='/guix/log/gnu/packages/guile.scm?id=93e19067b4428e41c281eebe19746ea253591aad'>guile.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/guile.scm?id=93e19067b4428e41c281eebe19746ea253591aad&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-07-19 22:23:26 +0200'>2024-07-19</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=31244f5cefae4c14a1a5d441dc3b3626b5f32abc'>Revert "gnu: guile: Update to 3.0.10."</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-07-19 12:41:20 -0400'>2024-07-19</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=24163eea584663568b68e19f364256fc7396b61f'>gnu: guile: Update to 3.0.10.</a><span class='msg-avail'>...</span></td><td>David Thompson</td></tr>
<tr><td><span title='2024-05-01 17:26:18 +0200'>2024-05-01</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=10aa88ea013ae042f53001b9b478ee97de08a299'>gnu: guile-git: Update to 0.7.0.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-04-30 10:24:32 -0400'>2024-04-30</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=b1365a032613e7756aca892a7422fda0b26b0627'>gnu: guile-next: Update to commit 3b76a30.</a><span class='msg-avail'>...</span></td><td>David Thompson</td></tr>
<tr><td><span title='2024-04-30 11:06:02 +0200'>2024-04-30</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=df3d30819e650a490ef39dd6692740bb13263c75'>gnu: guile-lzlib: Switch to ‘url-fetch’.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-04-28 23:08:57 +0200'>2024-04-28</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=7cef6b7ba555a9dfaf6d09cb7e112b0df77d5141'>gnu: guile-lzlib: Update to 0.3.0.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-04-08 16:17:21 -0400'>2024-04-08</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=5ab0b4c11449fd1db1aa444e3bd9ef78393721af'>gnu: guile-next: Update to commit db7efa5.</a><span class='msg-avail'>...</span></td><td>David Thompson</td></tr>
<tr><td><span title='2024-02-26 23:41:36 +0100'>2024-02-26</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=9f00975f55e569fc3ba204fc34261a942a19b4e5'>gnu: guile-git: Depend on libgit2 1.7.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-02-26 23:41:36 +0100'>2024-02-26</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=d2159ee9d19a27b06342e2d67b7f0e085e92090a'>gnu: guile-git: Update to 0.6.0.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2024-02-12 21:25:55 -0600'>2024-02-12</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=94c0eeea49b2a9c6ace3b77686dbd17091ce2f2d'>gnu: Add guile-bzip2.</a><span class='msg-avail'>...</span></td><td>Timothy Sample</td></tr>
<tr><td><span title='2024-02-02 14:20:46 +0100'>2024-02-02</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=a3a12e213316aeb348da04e1889bd4106bcbd3a5'>gnu: guile-next: Don't patch posix-spawn for the hurd.</a><span class='msg-avail'>...</span></td><td>Christopher Baines</td></tr>
<tr><td><span title='2024-01-29 13:38:35 -0500'>2024-01-29</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=370b79b4f5e6b8b05948e543678e263b38e51c0c'>gnu: guile-next: Update to commit fb1f5e2.</a><span class='msg-avail'>...</span></td><td>David Thompson</td></tr>
<tr><td><span title='2023-11-28 14:29:20 -0500'>2023-11-28</span></td><td><a href='/guix/commit/gnu/packages/guile.scm?id=cd46757c1a0f886848fbb6828c028dd2a2532767'>gnu: guile-next: Update to commit d8df317.</a><span class='msg-avail'>...</span></td><td>David Thompson</td></tr>