Re: CVS commit: src/usr.bin/patch

[David Laight <david%l8s.co.uk@localhost>]

On Thu, Jul 30, 2015 at 05:47:51PM -0400, Christos Zoulas wrote:
> Module Name:	src
> Committed By:	christos
> Date:		Thu Jul 30 21:47:51 UTC 2015
> 
> Modified Files:
> 	src/usr.bin/patch: pch.c
> 
> Log Message:
> from bitrieg:
> 
> Substitution commands might contain a newline in the replacement pattern
> (escaped with a backslash before it), causing patch's understanding of
> the state the ed child process is in to diverge from reality. This can
> lead to patch unwillingly feeding '!' (execute shell command) lines to
> ed. Finding out how to do this is left as an exercise to the reader.
> 
> XXX: pullup-7

Maybe patch should stop ed from executing shell commands.
Setting SHELL=/bin/false might be enough.

	David

-- 
David Laight: david%l8s.co.uk@localhost