* state.c (envvarok): Disallow LC_* and NLSPATH

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12946 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/appl/telnet/telnetd/ChangeLog b/src/appl/telnet/telnetd/ChangeLog
index c815eb0c445bb4ca9883695a47ac894d3e5c6969..b03b62efea44654716ed72cf0d90e34e6b521ea7 100644 (file)
--- a/src/appl/telnet/telnetd/ChangeLog
+++ b/src/appl/telnet/telnetd/ChangeLog
@@ -1,3 +1,7 @@
+2001-01-25  Tom Yu  <tlyu@mit.edu>
+
+       * state.c (envvarok): Disallow LC_* and NLSPATH.
+
 2000-12-06  Ken Raeburn  <raeburn@mit.edu>
 
        * telnetd.c (doit): Cast pty_make_sane_hostname first argument to

diff --git a/src/appl/telnet/telnetd/state.c b/src/appl/telnet/telnetd/state.c
index 83e1840f9ef734417d8fe7f835b02640ad966c2d..33743e43ed8b74cb08a01f003e17f65b1b4e526b 100644 (file)
--- a/src/appl/telnet/telnetd/state.c
+++ b/src/appl/telnet/telnetd/state.c
@@ -1663,6 +1663,8 @@ static int envvarok(varp)
            strcmp(varp, "KRB_REALMS") &&  /* cns v4 */
            strcmp(varp, "LIBPATH") &&     /* AIX */
            strcmp(varp, "RESOLV_HOST_CONF") && /* linux */
+           strcmp(varp, "NLSPATH") && /* locale stuff */
+           strncmp(varp, "LC_", strlen("LC_")) && /* locale stuff */
            strcmp(varp, "IFS")) {
                return 1;
        } else {