Merge 20733 - Linux: propagate LD_LIBRARY_PATH through the SUID sandbox....

chrome/browser/zygote_host_linux.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/zygote_host_linux.h"
 
 #include <unistd.h>
 #include <sys/types.h>
 #include <sys/socket.h>
 #include <sys/stat.h>
@@ skipping 35 matching lines @@
         browser_command_line.GetSwitchValue(switches::kZygoteCmdPrefix);
     cmd_line.PrependWrapper(prefix);
   }
 
   struct stat st;
   if (stat(kSandboxBinary, &st) == 0) {
     if (access(kSandboxBinary, X_OK) == 0 &&
         (st.st_mode & S_ISUID) &&
         (st.st_mode & S_IXOTH)) {
       cmd_line.PrependWrapper(ASCIIToWide(kSandboxBinary));
+
+      // SUID binaries clear LD_LIBRARY_PATH. However, the sandbox binary needs
+      // to run its child processes with the correct LD_LIBRARY_PATH so we save
+      // a copy here:
+      const char* ld_library_path = getenv("LD_LIBRARY_PATH");
+      if (ld_library_path)
+        setenv("SANDBOX_LD_LIBRARY_PATH", ld_library_path, 1 /* overwrite */);
     } else {
       LOG(FATAL) << "The SUID sandbox helper binary was found, but is not "
                     "configured correctly. Rather than run without sandboxing "
                     "I'm aborting now. You need to make sure that "
                  << kSandboxBinary << " is mode 4755.";
     }
   }
 
   // Start up the sandbox host process and get the file descriptor for the
   // renderers to talk to it.
@@ skipping 78 matching lines @@
       !read_pickle.ReadBool(&iter, &tmp_child_exited)) {
     LOG(WARNING) << "Error parsing DidProcessCrash response from zygote.";
     return false;
   }
 
   if (child_exited)
     *child_exited = tmp_child_exited;
 
   return did_crash;
 }