Prevent setuid applications from setting the driver path.

Also support LIBGL_DRIVERS_PATH if set, but only if EAGLE_DRIVER_PATH
isn't set.

1 files changed, 6 insertions, 1 deletions

diff --git a/eagle.c b/eagle.c
index 565047a..a5bc179 100644
--- a/eagle.c
+++ b/eagle.c
@@ -111,7 +111,12 @@ eglLoadDriver(EGLDisplay display, const char *driverName)
 	const char *path;
 	int i;
 
-	path = getenv("EAGLE_DRIVER_PATH");
+	/* Don't allow setuid applications to override the driver path. */
+	if (geteuid() == getuid()) {
+		path = getenv("EAGLE_DRIVER_PATH");
+		if (path == NULL)
+			getenv("LIBGL_DRIVERS_PATH");
+	}
 	if (path == NULL)
 		path = driDriverPath;