[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: bash exorcism experiment ('bug' 762923 & 763012)



On Mon, 13 Oct 2014, Dominik George wrote:

> foo='x[$(rm -rf /)]'
> echo $(( foo ))
> 
> Guess when the array index is evaluated? Now mind that it could be

This is fully and completely a user error. (User being the script.)

> user-provided.

Never put “tainted” input into ksh arithmetics, period.
(And always initialise your variables.)

It could be documented better. Stéphane Chazelas said
he may write it up in detail, which I have already promised
will then be linked from the mksh manpage.

bye,
//mirabilos
-- 
<Uli> Du hast Recht.
<Uli> Du hast Recht!


Reply to: