env: avoid leaving dangling pointers in __env_map

This is the minimal fix for __putenv leaving a pointer to freed heap
storage in __env_map array, which could later on lead to errors such
as double-free.

diff --git a/src/env/putenv.c b/src/env/putenv.c
index 4042869b500f1866e111918f121ba3d08d962287..7153042669da81a80bff37a3c25aeb1618a64da9 100644 (file)
--- a/src/env/putenv.c
+++ b/src/env/putenv.c
@@ -30,6 +30,7 @@ int __putenv(char *s, int a)
                                }
                        } else {
                                free(__env_map[j]);
+                               __env_map[j] = s;
                        }
                }
        }