in reply to Re: Insecure dependency in system under -T, with list form invocation
in thread Insecure dependency in system under -T, with list form invocation

Thanks for the links.
I get the point... Yes the @op may contain spaces and parentheses... I'll read in detail what to do to retain them. I have cleaned up only $ENV{PATH}... Anything else there that must be looked at?

Marc

  • Comment on Re^2: Insecure dependency in system under -T, with list form invocation

Replies are listed 'Best First'.
Re^3: Insecure dependency in system under -T, with list form invocation
by mr_mischief (Monsignor) on Sep 10, 2008 at 23:55 UTC
    Anything which gets its data from outside the program, whether it's in the environment, on the command line, or through system calls needs to be cleaned before it's used to make a system call.