[GHC] #15371: Eventlog framework outputs environment variables which may cause a security issue
GHC
ghc-devs at haskell.org
Sun Oct 14 20:05:14 UTC 2018
#15371: Eventlog framework outputs environment variables which may cause a security
issue
-------------------------------------+-------------------------------------
Reporter: maoe | Owner: (none)
Type: feature request | Status: new
Priority: normal | Milestone:
Component: Runtime System | Version: 8.4.3
Resolution: | Keywords:
Operating System: Unknown/Multiple | Architecture:
| Unknown/Multiple
Type of failure: Other | Test Case:
Blocked By: | Blocking:
Related Tickets: | Differential Rev(s): Phab:D5187
Wiki Page: |
-------------------------------------+-------------------------------------
Comment (by Krzysztof Gogolewski <krz.gogolewski@…>):
In [changeset:"68a747c702d2432cc90d2a79a6aba0e67ac3e2c0/ghc" 68a747c/ghc]:
{{{
#!CommitTicketReference repository="ghc"
revision="68a747c702d2432cc90d2a79a6aba0e67ac3e2c0"
rts: Stop tracing environment variables (fixes #15371)
Summary:
This tracing may cause a security issue as some external tools
out there expects user to set credentials in environment variables.
Reviewers: bgamari, erikd, simonmar, monoidal
Reviewed By: monoidal
Subscribers: tdammers, rwbarton, carter
GHC Trac Issues: #15371
Differential Revision: https://phabricator.haskell.org/D5187
}}}
--
Ticket URL: <http://ghc.haskell.org/trac/ghc/ticket/15371#comment:7>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler
More information about the ghc-tickets
mailing list