On Mon, 13 Oct 2014, Dominik George wrote:

> foo='x[$(rm -rf /)]'
> echo $(( foo ))
> 
> Guess when the array index is evaluated? Now mind that it could be

This is fully and completely a user error. (User being the script.)

> user-provided.

Never put “tainted” input into ksh arithmetics, period.
(And always initialise your variables.)

It could be documented better. Stéphane Chazelas said
he may write it up in detail, which I have already promised
will then be linked from the mksh manpage.

bye,
//mirabilos
-- 
<Uli> Du hast Recht.
<Uli> Du hast Recht!


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1410131220060.28...@tglase.lan.tarent.de

Reply via email to