From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Fri, 12 May 2000 20:55:35 +0000 (+0000)
Subject: Call clean_env very early in main() for paranoia's sake.  Idea from
X-Git-Tag: SUDO_1_6_4~271
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=7a2dfb77fb64991d1ba13e134122a7caeb1cfe25;p=sudo

Call clean_env very early in main() for paranoia's sake.  Idea from
Marc Esipovich.
---

diff --git a/sudo.c b/sudo.c
index 0580720a2..903e742c2 100644
--- a/sudo.c
+++ b/sudo.c
@@ -193,6 +193,9 @@ main(argc, argv)
 # endif
 #endif /* HAVE_GETPRPWNAM && HAVE_SET_AUTH_PARAMETERS */
 
+    /* Get rid of any nasty bits in the environment. */
+    clean_env(environ, badenv_table);
+
     Argv = argv;
     Argc = argc;
 
@@ -272,8 +275,6 @@ main(argc, argv)
     if (user_cmnd == NULL && NewArgc == 0)
 	usage(1);
 
-    clean_env(environ, badenv_table);
-
     cmnd_status = init_vars(sudo_mode);
 
     /* At this point, ruid == euid == 0 */