Add OS::running_in_privileged_state

Avoid any getenv toggles or reading /proc if we are setuid/setgid.

It is possible there is or will someday be some file in /proc that
is world-readable, but if read by a privileged user causes some side
effect.

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/ffi/ffi.cpp b/src/lib/ffi/ffi.cpp
index 162d96438..65c8dbcb4 100644
--- a/src/lib/ffi/ffi.cpp
+++ b/src/lib/ffi/ffi.cpp
@@ -6,6 +6,7 @@
 
 #include <botan/ffi.h>
 #include <botan/internal/ffi_util.h>
+#include <botan/internal/os_utils.h>
 #include <botan/version.h>
 #include <botan/mem_ops.h>
 #include <botan/hex.h>
@@ -17,7 +18,7 @@ namespace Botan_FFI {
 
 int ffi_error_exception_thrown(const char* func_name, const char* exn, int rc)
    {
-   if(std::getenv("BOTAN_FFI_PRINT_EXCEPTIONS"))
+   if(Botan::OS::running_in_privileged_state() == false && std::getenv("BOTAN_FFI_PRINT_EXCEPTIONS") != nullptr)
       {
       std::fprintf(stderr, "in %s exception '%s' returning %d\n", func_name, exn, rc);
       }