Bugtraq mailing list archives

Re: IFS hole?


From: shipley () merde dis org (Peter shipley)
Date: Wed, 15 Dec 1993 16:58:54 -0800



I wouldn't have thought the IFS environment variable should cause a
problem providing that the things that you are execving are not Bourne
Shell scripts (even then, as Peter Shipley says, it has been fixed
in most versions of the Bourne Shell). Since the Bourne
Shell has nothing to do with execv (unlike system, popen etc), the IFS
env var will have no effect.

you have to keep in mind that the programs you execv(2) could then
call a Bourne Shell either directly or indirectly.





Current thread: