getenv() in C: Reading Environment Variables for Configuration and Paths

A structured lesson workspace with readable content, hands-on examples, and a clean path to completion.

Lesson format8 sections1 video2 code blocks1 practice itemUpdated Aug 27, 2026

Environment variables are key-value pairs inherited from the parent process. PATH, HOME, USER, TMPDIR. Your program can read them with getenv, which takes a name and returns a pointer to the value string, or NULL if the variable is not set. The returned pointer points into the environment block. Do not free it. Do not modify it. It is not yours.

getenv() Function To Get The Value Of An Environment Variable

#include <stdio.h>
#include <stdlib.h>

int main(void) {
    const char *home = getenv("HOME");
    const char *path = getenv("PATH");
    const char *missing = getenv("THIS_VAR_DOES_NOT_EXIST");

    printf("HOME: %s\n", home ? home : "(not set)");
    printf("PATH: %.60s...\n", path ? path : "(not set)");
    printf("MISSING: %s\n", missing ? missing : "(not set)");

    return 0;
}

Run getenv_demo

root@vulnarex:~#gcc -Wall getenv_demo.c -o getenv_demo && ./getenv_demo

The ternary guard (home ? home : "(not set)") prevents passing NULL to printf's %s, which is undefined behavior. Some libc implementations print "(null)" as a courtesy, but the standard does not require it. Always guard. Environment variables are a common source of configuration: database URLs, API keys, temp directories, feature flags.

STRICT SECURE AUDIT RULE

The string returned by getenv may be overwritten by a subsequent call to setenv or putenv. If you need the value to persist, copy it with strdup or into your own buffer. Do not store the raw pointer and use it later after modifying the environment.

★ 20 XP

quiz BLOCK (★ 20 XP)

What does getenv return if the requested variable is not set?

Select your proof vectors above

getenv is how your program discovers its runtime context without hardcoding paths or credentials. Twelve-factor applications live and die by environment variables. Next: system, which runs a shell command from within your C program, and which carries significant security implications.

Lesson completion

Ready to resolve this lesson?

Finish the lesson once you have worked through the material. This awards ★ 20 XP.

Previous lesson

Lesson tools

Workspace

0% read

Lab notes

Notes persist per lesson.

Content

Last updated

August 27, 2026

Agent Setup

Access lesson content programmatically for AI agents, LLMs, and automated pipelines.

Fetch as Markdown (Accept header)

curl -H "Accept: text/markdown" "https://vulnarex.com/api/content/lessons?courseSlug=c-programming-tutorials&lessonSlug=36-getenv-function&lang=en&format=markdown"

MCP Server Config (mcp.json)

{
  "mcpServers": {
    "vulnarex": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-fetch"],
      "env": { "MCP_FETCH_URL": "https://vulnarex.com" }
    }
  }
}

MCP Server Card/.well-known/mcp.json A2A Agent Card/.well-known/agent-card.json API Catalog/.well-known/api-catalog robots.txt/robots.txt

Laboratory sanity code

Isolate active probes on matched virtual networks and keep execution streams sandboxed.

#include <stdio.h>

#include <stdlib.h>

int main(void) {

const char *home = getenv("HOME");

const char *path = getenv("PATH");

const char *missing = getenv("THIS_VAR_DOES_NOT_EXIST");

printf("HOME: %s\n", home ? home : "(not set)");

printf("PATH: %.60s...\n", path ? path : "(not set)");

printf("MISSING: %s\n", missing ? missing : "(not set)");

return 0;

}