Aug. 29, 2025
4:07 p.m.
tzset_unlocked() calls zoneinit() with TZLOAD_STRINGS | TZLOAD_FROMENV regardless of whether name actually came from the environment. If name is null, zoneinit() will use TZDEFAULT instead, but will incorrectly consider that to be tainted, and unnecessarily perform an access check before trying to open it. That is luckily harmless in unmodified tzcode, but I would still prefer if TZLOAD_FROMENV were only set when actually true; see attached patch. DES -- Dag-Erling Smørgrav - des@des.no