tarantool / checkpatch

Checkpatch for Tarantool
GNU General Public License v2.0
2 stars 2 forks source link

Add getenv to the list of unsafe functions #48

Closed sergepetrenko closed 1 year ago

sergepetrenko commented 1 year ago

getenv() is bad: it returns a pointer to the environment, which might be changed by a following call to setenv(), making the value pointed to longer and leading to buffer overflows.

See https://github.com/tarantool/tarantool/pull/7807