From: Rich Felker <dalias@aerifal.cx>
Date: Mon, 9 Sep 2013 17:39:08 +0000 (-0400)
Subject: do not use default when dynamic linker fails to open existing path file
X-Git-Url: http://nsz.repo.hu/git/?a=commitdiff_plain;h=ff4be700d0f316e043de8b3cf03ad64e086f0525;p=musl

do not use default when dynamic linker fails to open existing path file

if fopen fails for a reason other than ENOENT, we must assume the
intent is that the path file be used. failure may be due to
misconfiguration or intentional resource-exhaustion attack (against
suid programs), in which case falling back to loading libraries from
an unintended path could be dangerous.
---

diff --git a/src/ldso/dynlink.c b/src/ldso/dynlink.c
index 6d3d08ed..a89e7432 100644
--- a/src/ldso/dynlink.c
+++ b/src/ldso/dynlink.c
@@ -614,6 +614,8 @@ static struct dso *load_library(const char *name, struct dso *needed_by)
 						sys_path = "";
 					}
 					fclose(f);
+				} else if (errno != ENOENT) {
+					sys_path = "";
 				}
 			}
 			if (!sys_path) sys_path = "/lib:/usr/local/lib:/usr/lib";