[GHC] #15371: Eventlog framework outputs environment variables which may cause a security issue

GHC ghc-devs at haskell.org
Sun Oct 14 20:05:14 UTC 2018


#15371: Eventlog framework outputs environment variables which may cause a security
issue
-------------------------------------+-------------------------------------
        Reporter:  maoe              |                Owner:  (none)
            Type:  feature request   |               Status:  new
        Priority:  normal            |            Milestone:
       Component:  Runtime System    |              Version:  8.4.3
      Resolution:                    |             Keywords:
Operating System:  Unknown/Multiple  |         Architecture:
                                     |  Unknown/Multiple
 Type of failure:  Other             |            Test Case:
      Blocked By:                    |             Blocking:
 Related Tickets:                    |  Differential Rev(s):  Phab:D5187
       Wiki Page:                    |
-------------------------------------+-------------------------------------

Comment (by Krzysztof Gogolewski <krz.gogolewski@…>):

 In [changeset:"68a747c702d2432cc90d2a79a6aba0e67ac3e2c0/ghc" 68a747c/ghc]:
 {{{
 #!CommitTicketReference repository="ghc"
 revision="68a747c702d2432cc90d2a79a6aba0e67ac3e2c0"
 rts: Stop tracing environment variables (fixes #15371)

 Summary:
 This tracing may cause a security issue as some external tools
 out there expects user to set credentials in environment variables.

 Reviewers: bgamari, erikd, simonmar, monoidal

 Reviewed By: monoidal

 Subscribers: tdammers, rwbarton, carter

 GHC Trac Issues: #15371

 Differential Revision: https://phabricator.haskell.org/D5187
 }}}

-- 
Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/15371#comment:7>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler


More information about the ghc-tickets mailing list