Naive concatenation of $LD_LIBRARY_PATH can result in an empty colon-delimited segment; this tells glibc to load libraries from the current directory, which is definitely wrong, and may be a security vulnerability if the current directory is untrusted. (See #67234, for example.) Fix this throughout the tree. Signed-off-by: Anders Kaseorg <andersk@mit.edu>
12 lines
334 B
Plaintext
12 lines
334 B
Plaintext
#!@stdenv_shell@ -e
|
|
|
|
source @dfInit@
|
|
|
|
for i in dfhack.init-example dfhack-config/default hack/* stonesense/*; do
|
|
update_path "$i"
|
|
done
|
|
|
|
cd "$DF_DIR"
|
|
LD_LIBRARY_PATH="$env_dir/hack/libs:$env_dir/hack${LD_LIBRARY_PATH:+:}$LD_LIBRARY_PATH" \
|
|
LD_PRELOAD="$env_dir/hack/libdfhack.so:$LD_PRELOAD" exec $env_dir/libs/Dwarf_Fortress "$@"
|