Commit 3e786f4b authored by Richard Levitte's avatar Richard Levitte
Browse files

Only use environment variables if uid and gid are the same as euid and egid. 

This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
parent 4b66e713

crypto/threads/mttest.c

+2 −1
Original line number Diff line number Diff line
@@ -243,7 +243,8 @@ bad: 
		goto end;

		}



	if (cipher == NULL) cipher=getenv("SSL_CIPHER");

	if (cipher == NULL && OPENSSL_issetugid() == 0)

		cipher=getenv("SSL_CIPHER");



	SSL_load_error_strings();

	OpenSSL_add_ssl_algorithms();