summary refs log tree commit diff
path: root/pkgs/applications/networking/browsers/chromium/default.nix
diff options
context:
space:
mode:
authorIvan Kozik <ivan@ludios.org>2019-10-30 22:39:17 +0000
committerIvan Kozik <ivan@ludios.org>2019-10-31 01:34:19 +0000
commitb4f5dc2fb8763b959d2b3452be192d24a52ba1b4 (patch)
tree99f31d0dd12eaf8ce9ecbe50c1fc67a90fe76520 /pkgs/applications/networking/browsers/chromium/default.nix
parent399b77e55013208c394c8df8535d9484846b3cd8 (diff)
downloadnixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar.gz
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar.bz2
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar.lz
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar.xz
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.tar.zst
nixpkgs-b4f5dc2fb8763b959d2b3452be192d24a52ba1b4.zip
chromium: do not load .so files from current working directory
Fixes #67234.
Diffstat (limited to 'pkgs/applications/networking/browsers/chromium/default.nix')
-rw-r--r--pkgs/applications/networking/browsers/chromium/default.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/pkgs/applications/networking/browsers/chromium/default.nix b/pkgs/applications/networking/browsers/chromium/default.nix
index 8a3ae2a06a7..8329bf3ef55 100644
--- a/pkgs/applications/networking/browsers/chromium/default.nix
+++ b/pkgs/applications/networking/browsers/chromium/default.nix
@@ -156,7 +156,11 @@ in stdenv.mkDerivation {
       export CHROME_DEVEL_SANDBOX="$sandbox/bin/${sandboxExecutableName}"
     fi
 
-    export LD_LIBRARY_PATH="\$LD_LIBRARY_PATH:${libPath}"
+  '' + lib.optionalString (libPath != "") ''
+    # To avoid loading .so files from cwd, LD_LIBRARY_PATH here must not
+    # contain an empty section before or after a colon.
+    export LD_LIBRARY_PATH="\$LD_LIBRARY_PATH\''${LD_LIBRARY_PATH:+:}${libPath}"
+  '' + ''
 
     # libredirect causes chromium to deadlock on startup
     export LD_PRELOAD="\$(echo -n "\$LD_PRELOAD" | tr ':' '\n' | grep -v /lib/libredirect\\\\.so$ | tr '\n' ':')"