diff options
author | Assar Westerlund <assar@FreeBSD.org> | 2000-12-10 20:50:20 +0000 |
---|---|---|
committer | Assar Westerlund <assar@FreeBSD.org> | 2000-12-10 20:50:20 +0000 |
commit | ba688fa510d576d8d64ef75fcb117896a5f3a408 (patch) | |
tree | e972dad36612c0f0003ca9696cf28b86bf39ca59 /libexec | |
parent | 7892746ed45a583c2bb7a6f843ea5ff87f9ed9f3 (diff) | |
download | src-ba688fa510d576d8d64ef75fcb117896a5f3a408.tar.gz src-ba688fa510d576d8d64ef75fcb117896a5f3a408.zip |
(scrub_env): change to only accept a listed set of variables,
including only non-filename contents for TERMCAP
Notes
Notes:
svn path=/head/; revision=69825
Diffstat (limited to 'libexec')
-rw-r--r-- | libexec/telnetd/sys_term.c | 60 |
1 files changed, 37 insertions, 23 deletions
diff --git a/libexec/telnetd/sys_term.c b/libexec/telnetd/sys_term.c index b1ca5c4da611..63b6ede5fecc 100644 --- a/libexec/telnetd/sys_term.c +++ b/libexec/telnetd/sys_term.c @@ -1780,34 +1780,48 @@ addarg(argv, val) /* * scrub_env() * - * Remove a few things from the environment that - * don't need to be there. + * We only accept the environment variables listed below. */ void scrub_env() { - register char **cpp, **cpp2; + static const char *reject[] = { + "TERMCAP=/", + NULL + }; + + static const char *accept[] = { + "XAUTH=", "XAUTHORITY=", "DISPLAY=", + "TERM=", + "EDITOR=", + "PAGER=", + "LOGNAME=", + "POSIXLY_CORRECT=", + "PRINTER=", + NULL + }; + + char **cpp, **cpp2; + const char **p; + + for (cpp2 = cpp = environ; *cpp; cpp++) { + int reject_it = 0; + + for(p = reject; *p; p++) + if(strncmp(*cpp, *p, strlen(*p)) == 0) { + reject_it = 1; + break; + } + if (reject_it) + continue; - for (cpp2 = cpp = environ; *cpp; cpp++) { -#ifdef __FreeBSD__ - if (strncmp(*cpp, "LD_LIBRARY_PATH=", 16) && - strncmp(*cpp, "LD_PRELOAD=", 11) && -#else - if (strncmp(*cpp, "LD_", 3) && - strncmp(*cpp, "_RLD_", 5) && - strncmp(*cpp, "LIBPATH=", 8) && -#endif - strncmp(*cpp, "LOCALDOMAIN=", 12) && - strncmp(*cpp, "RES_OPTIONS=", 12) && - strncmp(*cpp, "TERMINFO=", 9) && - strncmp(*cpp, "TERMINFO_DIRS=", 14) && - strncmp(*cpp, "TERMPATH=", 9) && - strncmp(*cpp, "TERMCAP=/", 9) && - strncmp(*cpp, "ENV=", 4) && - strncmp(*cpp, "IFS=", 4)) - *cpp2++ = *cpp; - } - *cpp2 = 0; + for(p = accept; *p; p++) + if(strncmp(*cpp, *p, strlen(*p)) == 0) + break; + if(*p != NULL) + *cpp2++ = *cpp; + } + *cpp2 = NULL; } /* |