Re: GNU Sharutils and security

[Stepan Kasal]

Hi,

On Fri, Jul 02, 2004 at 07:16:18AM -0700, Bruce Korb wrote:
> > $ cat :x ; echo RUN: ; ./:x
> > #!/bin/echo this_is_a_test  ; \
> > exit 1
> > 
> > echo i am alive
> > exit 0
> > RUN:
> > this_is_a_test  ; \ ./:x
> 
> weird.

perhaps someone will appreciate a more detailed explanation:

The shell executes:

/bin/echo "this_is_a_test  ; \" ./:x

the rest of the first line forms the first argument.
If you write:

#!/bin/awk -f
... an awk script

and the first line has a spare blank at its end, then the following is
executed:

/bin/awk "-f " scriptname

which should mean that the script with name " " (one space) is to be
executed.  (Gawk does recognize this special case and loads the right
file anyway.)

Hope this amused you,
        Stepan Kasal