Project

General

Profile

Actions

Bug #2514

closed

Unsafe use of getenv("HOME") in SecPublicInfoSqlite3 and SecTpmFile

Added by Alex Afanasyev about 9 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Category:
Security
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:

Description

Not in all environments, HOME variable is defined. In cases when it is not, the current code results in obscure error. For example, my initial attempt on Android resulted in the following error:

02-12 00:18:08.374: A/NfdWrapper(2378): basic_string::_S_construct null not valid
Actions

Also available in: Atom PDF