bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: uname lead to embed code execution


From: Greg Wooledge
Subject: Re: uname lead to embed code execution
Date: Mon, 1 Mar 2021 09:38:55 -0500

felix (felix@f-hauri.ch) wrote:

> There it is:
> 
> $ declare -A map; key='foo$(uname >/dev/tty)bar'; map[$key]=
> $ echo map["$key"]
> map[foo$(uname >/dev/tty)bar]
> $ echo ${map["$key"]}
> 
> $ unset map["$key"]
> Linux

Yeah, it's sad but true.  I've just added a whole (short) section on
associative array index multiple expansions to my CodeInjection page.

https://mywiki.wooledge.org/CodeInjection



reply via email to

[Prev in Thread] Current Thread [Next in Thread]