Re: Advisory: Unchecked system(blaat $var blaat) call in Bugzilla 2.8

[Todd.Miller () COURTESAN COM (Todd C. Miller)]

Would it not be simpler (and safer) to just call system() with
a list instead of a scalar and thus prevent perl from ever invoking
a shell?

Ie, instead of:
    system("./processmail $id $::FORM{'who'}");
Use:
    system("./processmail", $id, $::FORM{'who'});

 - todd