blob: e495f54342372f537bd695e6ee215a0de2a91f1c [file] [log] [blame]
This patch stops any tampering with library path variables and ensures that
the SDK's version of shlibsign is always used in the signing process. See
crbug/884946 for more information.
diff --git a/nss/cmd/shlibsign/sign.sh b/nss/cmd/shlibsign/sign.sh
index d8bd837..1944aa9 100644
--- nss/cmd/shlibsign/sign.sh
+++ nss/cmd/shlibsign/sign.sh
@@ -33,19 +33,7 @@ WIN*)
"${2}"/shlibsign -v -i "${5}"
;;
*)
- LIBPATH=`(cd "${1}"/lib; pwd)`:`(cd "${4}"; pwd)`:$LIBPATH
- export LIBPATH
- SHLIB_PATH=${1}/lib:${4}:$SHLIB_PATH
- export SHLIB_PATH
- LD_LIBRARY_PATH=${1}/lib:${4}:$LD_LIBRARY_PATH
- export LD_LIBRARY_PATH
- DYLD_LIBRARY_PATH=${1}/lib:${4}:$DYLD_LIBRARY_PATH
- export DYLD_LIBRARY_PATH
- LIBRARY_PATH=${1}/lib:${4}:$LIBRARY_PATH
- export LIBRARY_PATH
- ADDON_PATH=${1}/lib:${4}:$ADDON_PATH
- export ADDON_PATH
- echo "${2}"/shlibsign -v -i "${5}"
- "${2}"/shlibsign -v -i "${5}"
+ echo shlibsign -v -i "${5}"
+ shlibsign -v -i "${5}"
;;
esac