[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#95430 acknowledged by developer (Re: Bug#95430: ash: word-splitting changes break shell scripts)



severity 95430 wishlist
quit

On Mon, Apr 30, 2001 at 06:35:53PM -0700, Zack Weinberg wrote:
> 
> (tests) ... except that ash does honor IFS from the environment.  You
> realize that this is a gaping security hole, even if IFS is only used
> to split the results of expansion?  You realize that it is trivial to
> break any shell script on the entire machine that way?

Get a clue, Linux does not allow setuid scripts.

> What the standard says is IRRELEVANT.  You cannot change consensus
> shell behavior even if it is in direct conflict with the standard.

You're the one who doesn't get it.  If you are writing shell functions
and you need to save the IFS, then you need to save it properly.
-- 
Debian GNU/Linux 2.2 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt



Reply to: