Re: Inheriting IFS from environment

[Gioele Barabucci <gioele@xxxxxxxxx>]

On 30/12/2015 18:06, Martijn Dekker wrote:
> Unlike bash, *ksh and zsh, dash allows inheriting IFS from the environment:
> 
> $ IFS=bla dash -c "x='hela hola'; echo \$x"
> he  ho
> 
> This seems a bit dodgy from a security point of view.

Hi,

The Debian BTS contains a similar report:
<https://bugs.debian.org/541642>. One suggestion from that thread:

> POSIX says (IEEE Std 1003.1, 2004 Edition; 2.5.3 Shell Variables):
>
>> Implementations may ignore the value of IFS in the environment at the
>> time the shell is invoked, treating IFS as if it were not set.

Regards,

--
Gioele Barabucci <gioele@xxxxxxxxx>


--
To unsubscribe from this list: send the line "unsubscribe dash" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html