Gemini CLI PR fixes checker env leak: third-party checkers once saw GEMINI_API_KEY
ManoharPaturi · ghdev · 2026-09-27
A PR against google-gemini/gemini-cli patches two flaws in CheckerRunner: external checker binaries inherited the full CLI process environment — including GEMINIAPIKEY and every other secret — and their stdout accumulated without a cap, so a buggy or malicious checker could exhaust memory before the timeout fired.
The fix:
- A new buildCheckerEnv gives external checkers a minimal allowlist (PATH, plus SYSTEMROOT on Windows) merged with explicit config.env entries, keeping legitimate checker config working while secrets stay out of reach.
- stdout/stderr are capped at 256KB each; on overflow the process is killed (SIGTERM with a 5s SIGKILL fallback) and the tool call is DENY-ed with a clear reason, failing closed by default.
- Class docs state the trust boundary: external checkers are third-party and untrusted until proven otherwise.
Tests included; checker-runner suite passes 12/12 with the fix.
More from coding & agent
- Science Mode Auto-Edits Explainer Videos with Claude, Scripts and Your Footage — realmeetjames · 2026-09-27
- MIT Textbook Chapter on Paper Writing Goes Viral: Only Good Papers Count — Haoyu_Xiong_ · 2026-09-27
- pdfcn: styled PDF Claude Code skill shipped as a shadcn component library, 2.2k stars — rchardkovacs · 2026-09-27
- Building a "natural language autoencoder" to chat with your garden — cephaloform · 2026-09-27
- Open-source git-story-film Skill Turns Your Git History Into a Short Film — dotey · 2026-09-27
- Rust-style constrained languages suit LLMs; agent-targeted DSLs are coming — burny_tech · 2026-09-27