From 04134742f9df9a66e5484d74f2eb51de20a3bd8e Mon Sep 17 00:00:00 2001 From: Petar Paradzik Date: Sat, 26 Aug 2017 12:00:31 +0800 Subject: [PATCH] cgi: fix overriding 'PATH' environment variable Signed-off-by: Petar Paradzik --- lib/libwebsockets.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/libwebsockets.c b/lib/libwebsockets.c index 219febba..a3179c69 100755 --- a/lib/libwebsockets.c +++ b/lib/libwebsockets.c @@ -2646,6 +2646,8 @@ lws_cgi(struct lws *wsi, const char * const *exec_array, int script_uri_path_len p++; } } + env_array[n++] = "PATH=/bin:/usr/bin:/usr/local/bin:/var/www/cgi-bin"; + env_array[n++] = p; p += lws_snprintf(p, end - p, "SCRIPT_PATH=%s", exec_array[0]) + 1; @@ -2660,7 +2662,6 @@ lws_cgi(struct lws *wsi, const char * const *exec_array, int script_uri_path_len } env_array[n++] = "SERVER_SOFTWARE=libwebsockets"; - env_array[n++] = "PATH=/bin:/usr/bin:/usr/local/bin:/var/www/cgi-bin"; env_array[n] = NULL; #if 0