diff options
| author | matz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2007-08-27 10:15:18 +0000 |
|---|---|---|
| committer | matz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2007-08-27 10:15:18 +0000 |
| commit | 8e12dcbd7b14fbdef2ee100970cdf73c741fe324 (patch) | |
| tree | ca594cb98157258ea7c98ca0237352b6cea72239 | |
| parent | 84820319789e6ba191ace5744c2e14be1a5f274e (diff) | |
| download | ruby-8e12dcbd7b14fbdef2ee100970cdf73c741fe324.tar.gz ruby-8e12dcbd7b14fbdef2ee100970cdf73c741fe324.tar.xz ruby-8e12dcbd7b14fbdef2ee100970cdf73c741fe324.zip | |
* ext/etc/etc.c (etc_getlogin): update documentation to note
security issue. [ruby-Bugs-11821]
git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@13284 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
| -rw-r--r-- | ChangeLog | 5 | ||||
| -rw-r--r-- | ext/etc/etc.c | 2 |
2 files changed, 7 insertions, 0 deletions
@@ -1,3 +1,8 @@ +Mon Aug 27 19:10:50 2007 Yukihiro Matsumoto <matz@ruby-lang.org> + + * ext/etc/etc.c (etc_getlogin): update documentation to note + security issue. [ruby-Bugs-11821] + Mon Aug 27 15:56:48 2007 Nobuyoshi Nakada <nobu@ruby-lang.org> * string.c (sym_encoding): return the encoding of a Symbol. diff --git a/ext/etc/etc.c b/ext/etc/etc.c index 94c8b6b85..7c8fba3b8 100644 --- a/ext/etc/etc.c +++ b/ext/etc/etc.c @@ -35,6 +35,8 @@ char *getenv(); char *getlogin(); /* Returns the short user name of the currently logged in user. + * Unfortunately, it is often rather easy to fool getlogin(). + * Avoid getlogin() for security-related purposes. * * e.g. * Etc.getlogin -> 'guest' |