If LD_LIBRARY_PATH is unset, nvidia-xinitrc exports LD_LIBRARY_PATH with
a trailing colon (':') which is interpreted as an empty path, i.e., the
current working directory (CWD). This creates a security vulnerability
known as "Uncontrolled Search Path Element" (CWE-427). The commit avoids
appending a trailing colon if LD_LIBRARY_PATH is empty.
resilar
commented
4 years ago
If LD_LIBRARY_PATH is unset, nvidia-xinitrc exports LD_LIBRARY_PATH with a trailing colon (':') which is interpreted as an empty path, i.e., the current working directory (CWD). This creates a security vulnerability known as "Uncontrolled Search Path Element" (CWE-427). The commit avoids appending a trailing colon if LD_LIBRARY_PATH is empty.