summaryrefslogtreecommitdiff
path: root/ext/etc
diff options
context:
space:
mode:
authormatz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>2007-08-27 10:15:18 +0000
committermatz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>2007-08-27 10:15:18 +0000
commitfd618e22343d82f5ca5ec0d21a476c0a534220d9 (patch)
treeca594cb98157258ea7c98ca0237352b6cea72239 /ext/etc
parent3ca07d8718a156d2dcc3691bfdd5a0fecfc276d7 (diff)
* ext/etc/etc.c (etc_getlogin): update documentation to note
security issue. [ruby-Bugs-11821] git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@13284 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ext/etc')
-rw-r--r--ext/etc/etc.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/ext/etc/etc.c b/ext/etc/etc.c
index 94c8b6b..7c8fba3 100644
--- a/ext/etc/etc.c
+++ b/ext/etc/etc.c
@@ -35,6 +35,8 @@ char *getenv();
char *getlogin();
/* Returns the short user name of the currently logged in user.
+ * Unfortunately, it is often rather easy to fool getlogin().
+ * Avoid getlogin() for security-related purposes.
*
* e.g.
* Etc.getlogin -> 'guest'