You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Since $builddir isn't quoted, chaos will ensue if this ever becomes subject to word splitting for any reason. C.f.: bumblebeee
since you don't have set -u, who knows what will happen if the variable is unset when we get to this point? C.f.: steam-for-linux and shellcheck (I'm not really recommending set -u btw)
Globs and wildcards in the path will be expanded by the shell before rm is called, leading to some kind of apocalypse probably.
You may think that the code as-written can't be subject to such problems. But a future refactoring elsewhere could render this unsafe.
If you agree I can send a PR adding some safety catches. What do you think?
The text was updated successfully, but these errors were encountered:
Thanks for this. I was recently lamenting the lack of anything like this tool.
bashvm/bin/bashvm-install
Line 28 in 1b020ea
This is dangerous.
$builddir
isn't quoted, chaos will ensue if this ever becomes subject to word splitting for any reason. C.f.: bumblebeeeset -u
, who knows what will happen if the variable is unset when we get to this point? C.f.: steam-for-linux and shellcheck (I'm not really recommendingset -u
btw)rm
is called, leading to some kind of apocalypse probably.You may think that the code as-written can't be subject to such problems. But a future refactoring elsewhere could render this unsafe.
If you agree I can send a PR adding some safety catches. What do you think?
The text was updated successfully, but these errors were encountered: