Commit f28e8bd3 authored by Richard Levitte's avatar Richard Levitte
Browse files

Only use environment variables if uid and gid are the same as euid and egid. 

This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
parent de02ec27

crypto/threads/mttest.c

+2 −1
Original line number Diff line number Diff line
@@ -267,7 +267,8 @@ bad: 
		goto end;

		}



	if (cipher == NULL) cipher=getenv("SSL_CIPHER");

	if (cipher == NULL && OPENSSL_issetugid() == 0)

		cipher=getenv("SSL_CIPHER");



	SSL_load_error_strings();

	OpenSSL_add_ssl_algorithms();