Xz Backdoor, Cybersecurity.
one of the earlier uncertainties can be addressed: since the foo_resolver function is loaded and called during the dl linking phase, at which point the environment variables have not been loaded by GLIBC, calling the getenv function will return NULL, resulting in the ultimate return of the foo_2