Stephen Dowdy wrote:
> thanks for the very quick response, sorry i didn't see that bug.
>
> BUT... the other part of this issue is that 'dot-source' is fatal-aborting
> on that 'export BAD-VAR=value'. It wasn't clear to me that that is expected
> behavior. It's certainly not necessarily desireable.
It is expected behavior, unfortunately. Consider the following worse
example:
$ env '`echo >&2 "I am output from arbitrary code."`greeting=hello' \
dash -c 'export -p' | tail -1
export `echo >&2 "I am output from arbitrary code."`greeting='hello'
$ export `echo >&2 "I am output from arbitrary code."`greeting='hello'
I am output from arbitrary code.
$ echo $greeting
hello
The only sane way to fix this is for the shell to sanitize its
environment. Even post-processing "export -p" output is not really
feasible because the format varies from shell to shell.
Thanks,
Jonathan
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
