Path: csiph.com!xmission!news.snarked.org!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail From: Eli Schwartz Newsgroups: gnu.bash.bug Subject: =?UTF-8?B?UmU6IOKAmGNvbW1hbmQg4oCmICbigJkgY3JlYXRlcyBzdWJzaGVsbA==?= Date: Wed, 1 Jul 2020 07:54:05 -0400 Lines: 78 Approved: bug-bash@gnu.org Message-ID: References: <7dvoi92p.dag@gnui.org> <09ea84b2-4fb1-6b05-7c0b-fe6b2ab00c6f@archlinux.org> <2643.1593599092@jinx.noi.kre.to> <511886e8-2262-39ee-2a01-7d284e981cb1@archlinux.org> NNTP-Posting-Host: lists.gnu.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lK4WBOkiyJZqtaMdrW8cgDc4jTrI53wsP" X-Trace: usenet.stanford.edu 1593604464 29550 209.51.188.17 (1 Jul 2020 11:54:24 GMT) X-Complaints-To: action@cs.stanford.edu Cc: bug-bash@gnu.org To: Robert Elz , Dmitry Alexandrov Envelope-to: bug-bash@gnu.org X-Spam-BL-Results: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=archlinux.org; s=orion; t=1593604451; bh=mSP7V174I75JbEkAD2wLZ9DqdJfBvrzNbZFED/Gk50Y=; h=Subject:To:Cc:References:From:Date:In-Reply-To; b=K/XN9HcGQd6h4mExrDlLeEzkcFIiu+e86/2pE8FVAZ3oQkdaiZim7/BcSX8Hz0Fh+ 3p4jWlgIVC4jfjT+a4Vkd9uy7obPk1Gxbq1UsP/rfMjVwKBDhg01T/+sxihsRUnhR3 MlxKy7LrtHpBJr0qltmcwj6oyd3dcjyUr13ReigTxqpGOkPwlAwJqr61AHsUPBYsZK wqkTWriHH8I6Ve94CltSXV9obrRjUDtyV2lAGk7rykmf+7yk/j0VXuZE+2nh1OO1Hf nlU4k2lMWZDuaq/w00Ld0h6sdS1G9n4FUaoNgcW0B+LKeXnMLOobpv7l0m5y0yWwXK Di69R3VKqsCWuSaU0B12Iq5jldhXj5sKE3xjGFIUGtu6dFZNRl77MDC7jp1PkvFBui vJORAYAltdjvmsi7sV5vPmFX9KiwrYMrFyCsjjZhHdorT2ef+OTwKGzEeKXxfk/JVV pWJOIU3V6fgkHp/GTan49ZuWmLURbA15hTeKcZs13DoeQTAGLM6zQNpmKHBH2W3AiX rQaaQXyFaxMtTnl+4ahGBz6xPEGHLEwV6RuHC+T7kN8Z3RARnAIEI4u+zatDQQaK0O NTyZ4txuSlJr+f3jAZhkP/hoYYs3FAXqIXYLVFip/CUqxJj/Zz+QJrAPycNZP8aFi7 iWYo21ltLGeg7MZ0vo/5LyXw= X-Clacks-Overhead: GNU Terry Pratchett User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.9.0 In-Reply-To: <2643.1593599092@jinx.noi.kre.to> Received-SPF: pass client-ip=88.198.91.70; envelope-from=eschwartz@archlinux.org; helo=orion.archlinux.org X-detected-operating-system: by eggs.gnu.org: First seen = 2020/07/01 07:54:16 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -53 X-Spam_score: -5.4 X-Spam_bar: ----- X-Spam_report: (-5.4 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: bug-bash@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Bug reports for the GNU Bourne Again SHell List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: <511886e8-2262-39ee-2a01-7d284e981cb1@archlinux.org> X-Mailman-Original-References: <7dvoi92p.dag@gnui.org> <09ea84b2-4fb1-6b05-7c0b-fe6b2ab00c6f@archlinux.org> <2643.1593599092@jinx.noi.kre.to> Xref: csiph.com gnu.bash.bug:16506 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --lK4WBOkiyJZqtaMdrW8cgDc4jTrI53wsP Content-Type: multipart/mixed; boundary="QEn3FRevAXq7RkFtoTFPACxvynLJ46Y5h" --QEn3FRevAXq7RkFtoTFPACxvynLJ46Y5h Content-Type: text/plain; charset=utf-8 Content-Language: en-US-large Content-Transfer-Encoding: quoted-printable On 7/1/20 6:24 AM, Robert Elz wrote: > Date: Wed, 01 Jul 2020 00:43:14 +0300 > From: Dmitry Alexandrov > Message-ID: >=20 > | > If you need to ensure a disk executable is used, > | Of course. Why "command" otherwise? >=20 > That doesn't actually work, "command" can run built-ins, there is > actually no method (not even via use of "env") which guarantees > execution of an executable from an external file, other than by > using the complete path name (containing at least one '/') of the > desired file. Indeed -- that's why I specifically used the bashism $(type -P ...) as type -P forces the printing of an external file executable. Regarding use of env, I presume you're referring to the busybox behavior here, where busybox's builtin env applet will still execute other builtin applets. That's the only case I'm aware of that will not guarantee execution of an executable from an external file -- so shouldn't env be safe to use as such, if you know: a) your interpreter is bash rather than /bin/sh, b) the external disk executable "env" is not a symlink to busybox --=20 Eli Schwartz Arch Linux Bug Wrangler and Trusted User --QEn3FRevAXq7RkFtoTFPACxvynLJ46Y5h-- --lK4WBOkiyJZqtaMdrW8cgDc4jTrI53wsP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvSewel70XCra9w4EhIGKaBmvSpsFAl78eV4ACgkQhIGKaBmv SpuEnBAAqKlS3fAqnqcdVM5ehQ5miWs9/2m2vOajliDKLGbbwMmp1zzhEOvxmlNn zwYR9ThGrci7VlJRQTdtjz6OP8aPwVmHDNcl53y1klJCsZ5qfaKhcuxRmPZQnoQ+ JT2Gza36C/rhzQffb+ZyH3r1+uG7HflMiY9tp5Fvn2gWD7m9FQ7N9Cs5gNcQCJxT tFkgkyyts7oM5kEqWl63dUwjv20PKHD1qb/4voi6J0oGQoOBj/H8NQOIAEdjSAEy Vbt2rrI+QbT4i4lB9qVL1TNjPSAjfD3uuoGmlQNWFyPnnn+YNk3c3PhEIe38xHr7 jFlcjWv/w6aOSFyFIw95hj7KLOtGTZGHvUSKNrWqXX+qUJb33z9PccQt57vMX62W nNsSUwyOGAO4rzN0NZd/QWAdXt+ja7oYmJ3tCKZIMN0pvcl5Tlud/oWBf4rx57G9 3T2DVVai2T78h6ynzmLTyhUu0l3pYAnf43zWAd3YJTpffNjXYArSVF0H+gvIkrdK OOFCknBZB9KbSkb89BA/Q/KhxSXFCASLeL4KqtYBCKacknPWcA4o+UtTwVJINvjq EWY1soa9+OflUCbTK0Gu0RVPU7T90VLy1eIgDRWHrnPtD50js8B4jUSROwSykbIl HLKF4vZTUoWiNhW58z1MrqxaTVlA+F7rvOo7v/+spFGDUfuFcDKJAjMEAQEKAB0W IQRgQRMEwJ02YoNA7v/OsWfvtXIr1gUCXvx5XgAKCRDOsWfvtXIr1kKYD/442hDO +oFdFWHe5KN1Foe5350TUxFcaW7mvZ2bc1g7hkUUF7qrReR56dggtARNH4bUbfEd 588MhTNf3vCdYur5b1DoxGPquFDst4ZJCXmqh8Mahuupd/khxF7IXAn6FdhVz0il lYbQlYa/tLuq1sFQYgLr8ntPgiakBj75H1X21FFZuRkVz84A5dJhOFjgQEEJmR7l OvZnQ229e2dOLbY9ogY0hSGs5N1jq/+wHZ1Cbtk9NkKvSeg30Lsl4yoXBVWi7Mc/ Skq8Z+T8Ozf1RSq5epKJT0WDcLWgB7DjV7RMCMh8QylkmIek2tR0BZS9KBiQE2if t1PnKlv8r4DwMn55nY5rjUJGTUxiZrPD5xvjE2Jn/9kyEMoLvPldG6blJjeVRchq tSifcm9+6hEiDSecFVum75m3xo8fncPxu4D3bO2Aa45fgYfkSqkyi2a5sEDrPPrs UE7taTSvy+6ZA+sT9xJAzD8x471/aHhBusItWps7rXf2CRMm3DJqQh2ds0ug+w/M MfTlMSx6JV5BGt7EcM7JgASwxJbcuVLce4FCQFB64jdLth8RCiDk3sBn5kuM5Gj1 pCbUqXBSWKrhTly4stAHIZWYt7rH6x4eptfUblWySukWjbkXjFm103JDuDt+pzYr 1L1FiTQ1fErlRcEdnP1HqNZdrUuxJFte/0rqrw== =2l+3 -----END PGP SIGNATURE----- --lK4WBOkiyJZqtaMdrW8cgDc4jTrI53wsP--