From 9f99278525a7bca2b7406428a7eae2705d8a5e31 Mon Sep 17 00:00:00 2001 From: intika Date: Tue, 22 Jan 2019 13:25:35 +0000 Subject: [PATCH] Fix security issue CVE-2015-3887 --- src/main.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/main.c b/src/main.c index 191ba7f..009a352 100644 --- a/src/main.c +++ b/src/main.c @@ -37,7 +37,7 @@ static const char *dll_name = DLL_NAME; static char own_dir[256]; static const char *dll_dirs[] = { - ".", + //".", own_dir, LIB_DIR, "/lib", @@ -52,7 +52,8 @@ static void set_own_dir(const char *argv0) { while(l && argv0[l - 1] != '/') l--; if(l == 0) - memcpy(own_dir, ".", 2); + //memcpy(own_dir, ".", 2); + memcpy(own_dir, "/dev/null/", 2); else { memcpy(own_dir, argv0, l - 1); own_dir[l] = 0;