in latest bash:

suppose script:

for i in "${filenam...@]}"; do
    echo "$i"
done

if malicious user give file name "-e", empty string will be emitted to
stdout, but string "-e" should.

It will be nice if I cat write
echo -- "$i"
as many tool, such as grep, use.

Now, I replace echo "$i" with printf "%s\n" "$i", but it is
workaround, as I think.

-- 
Segmentation fault

Reply via email to