From: Martijn Dekker <martijn@inlv.org>
To: dash@vger.kernel.org
Subject: Inheriting IFS from environment
Date: Wed, 30 Dec 2015 18:06:42 +0100 [thread overview]
Message-ID: <56840F22.6040302@inlv.org> (raw)
Unlike bash, *ksh and zsh, dash allows inheriting IFS from the environment:
$ IFS=bla dash -c "x='hela hola'; echo \$x"
he ho
This seems a bit dodgy from a security point of view. For instance, most
scripts don't bother to quote their variables in test commands such as [
$var -eq 0 ], making it possible to influence the program flow by
manipulating IFS from the outside.
- M.
next reply other threads:[~2015-12-30 17:06 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-12-30 17:06 Martijn Dekker [this message]
2016-01-03 18:46 ` Inheriting IFS from environment Gioele Barabucci
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=56840F22.6040302@inlv.org \
--to=martijn@inlv.org \
--cc=dash@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.