Closed britter closed 3 years ago
I did not change the way envp is created because I realized that the environment will be inherited anyway when the new process is spawned. That's probably the reason why null
is passed if the user supplied environment variables are empty.
This has been assigned CVE-2021-21361 https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-jpcm-4485-69p7
Fixes #19