Since this is a library, place issetugid() before every getenv()

ok miod

1 files changed, 3 insertions, 2 deletions

diff --git a/src/lib/libcrypto/engine/eng_list.c b/src/lib/libcrypto/engine/eng_list.c
index 053767c646..22e2abb01d 100644
--- a/src/lib/libcrypto/engine/eng_list.c
+++ b/src/lib/libcrypto/engine/eng_list.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: eng_list.c,v 1.10 2014/06/22 12:15:53 jsing Exp $ */
+/* $OpenBSD: eng_list.c,v 1.11 2014/06/23 22:19:02 deraadt Exp $ */
 /* Written by Geoff Thorpe (geoff@geoffthorpe.net) for the OpenSSL
  * project 2000.
  */
@@ -385,7 +385,8 @@ ENGINE_by_id(const char *id)
                 return iterator;
         /* Prevent infinite recusrion if we're looking for the dynamic engine. */
         if (strcmp(id, "dynamic")) {
-                if ((load_dir = getenv("OPENSSL_ENGINES")) == 0)
+                if (issetugid() == 0 ||
+                    (load_dir = getenv("OPENSSL_ENGINES")) == 0)
                         load_dir = ENGINESDIR;
                 iterator = ENGINE_by_id("dynamic");
                 if (!iterator ||