TIL: POSIX wordexp(3) is dangerous
https://yossarian.net/til/post/posix-wordexp-3-is-dangerous/
4 results for “yossarian”
TIL: POSIX wordexp(3) is dangerous
https://yossarian.net/til/post/posix-wordexp-3-is-dangerous/
I find this guidance from Apple shocking in light of their inability to roll this root bundle, it seems ~impossible to categorically assert that most users are not affected by them not having fixed this. particularly in light of a nontrivial percent of their installation base being developers.
on the other hand, I guess it's good that a future update will fix this. hopefully the next one.
introducing my new exploit: shell2shell. you give me shell and I get shell
whether in cigarettes or archives, tar is bad for your health