diff options
| author | millert <> | 2000-08-02 04:10:47 +0000 |
|---|---|---|
| committer | millert <> | 2000-08-02 04:10:47 +0000 |
| commit | e56127299dd3bb78db3838b2df516606d1911299 (patch) | |
| tree | 286d9be3769e079bf8e1cff3ad8faba47795ae6d | |
| parent | 7858083b781b818094dfe3485ef0d19f4833cbf5 (diff) | |
| download | openbsd-e56127299dd3bb78db3838b2df516606d1911299.tar.gz openbsd-e56127299dd3bb78db3838b2df516606d1911299.tar.bz2 openbsd-e56127299dd3bb78db3838b2df516606d1911299.zip | |
$HOME paranoia: never use getenv("HOME") w/o checking for NULL and non-zero
| -rw-r--r-- | src/lib/libcrypto/rand/randfile.c | 2 | ||||
| -rw-r--r-- | src/lib/libssl/src/crypto/rand/randfile.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libcrypto/rand/randfile.c b/src/lib/libcrypto/rand/randfile.c index 53a75667f4..c6ff27be0e 100644 --- a/src/lib/libcrypto/rand/randfile.c +++ b/src/lib/libcrypto/rand/randfile.c | |||
| @@ -230,7 +230,7 @@ const char *RAND_file_name(char *buf, int size) | |||
| 230 | else | 230 | else |
| 231 | { | 231 | { |
| 232 | s=getenv("HOME"); | 232 | s=getenv("HOME"); |
| 233 | if (s == NULL) | 233 | if (s == NULL || *s == '\0') |
| 234 | ret = RFILE; | 234 | ret = RFILE; |
| 235 | if (((int)(strlen(s)+strlen(RFILE)+2)) > size) | 235 | if (((int)(strlen(s)+strlen(RFILE)+2)) > size) |
| 236 | ret=RFILE; | 236 | ret=RFILE; |
diff --git a/src/lib/libssl/src/crypto/rand/randfile.c b/src/lib/libssl/src/crypto/rand/randfile.c index 53a75667f4..c6ff27be0e 100644 --- a/src/lib/libssl/src/crypto/rand/randfile.c +++ b/src/lib/libssl/src/crypto/rand/randfile.c | |||
| @@ -230,7 +230,7 @@ const char *RAND_file_name(char *buf, int size) | |||
| 230 | else | 230 | else |
| 231 | { | 231 | { |
| 232 | s=getenv("HOME"); | 232 | s=getenv("HOME"); |
| 233 | if (s == NULL) | 233 | if (s == NULL || *s == '\0') |
| 234 | ret = RFILE; | 234 | ret = RFILE; |
| 235 | if (((int)(strlen(s)+strlen(RFILE)+2)) > size) | 235 | if (((int)(strlen(s)+strlen(RFILE)+2)) > size) |
| 236 | ret=RFILE; | 236 | ret=RFILE; |