bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[50 character or so descriptive subject here (for reference)]


From: Martin Wheatley
Subject: [50 character or so descriptive subject here (for reference)]
Date: Thu, 29 Jun 2006 10:29:39 +0100 (BST)

Configuration Information [Automatically generated, do not change]:
Machine: sparc
OS: solaris2.7
Compiler: gcc
Compilation CFLAGS:  -DPROGRAM='bash' -DCONF_HOSTTYPE='sparc' 
-DCONF_OSTYPE='solaris2.7' -DCONF_MACHTYPE='sparc-sun-solaris2.7' 
-DCONF_VENDOR='sun' -DSHELL  -DHAVE_CONFIG_H  -D_LARGEFILE_SOURCE 
-D_FILE_OFFSET_BITS=64 -D_LARGEFILE64_SOURCE -I.  -I. -I./lib 
-I/usr/local/depot/bash-2.03/include -g -O2
uname output: SunOS xn-sysadm-4 5.10 Generic_118822-30 sun4u sparc 
SUNW,Sun-Blade-100
Machine Type: sparc-sun-solaris2.7

Bash Version: 2.03
Patch Level: 0
Release Status: release

Description:
        Bash may inadvertently execute a command that the user did not 
anticipate
        if STDIN is closed.

Repeat-By:
        Unfortunately I can't construct a test case that doesn't need
        our local s/ware.

        But the problem is ...

        When bash reads input (in interactive mode) if it gets EOF
        it then executes any partial command that is in the input buffer - even 
though <CR>
        has not been entered by the user

Fix:
        Incomplete commands should not be executed - they can have disasterous
        results.

        Example:
                If the command being entered were "rm -rf 
/home/username/tmp/junk"
                but the input is terminated just at the point where username 
has been
                entered then the user's /home dircetory is trashed.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]