mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2025-11-01 22:58:50 -04:00
LD_LIBRARY_PATH="/path/to/lib:" is interpreted as equivalent to LD_LIBRARY_PATH="/path/to/lib:.", loading libraries from the current working directory, which could lead to malicious libraries being loaded if the current working directory is untrusted. To avoid this, only add the current LD_LIBRARY_PATH to the new LD_LIBRARY_PATH if it is actually set. This commit also single-quotes the interpolated @VARIABLES@ so that their values can contain shell special characters (other than single quotes). Signed-off-by: Simon McVittie <smcv@debian.org> |
||
|---|---|---|
| .. | ||
| examples | ||
| src | ||