Make is Buggy (was \"special\" shells a security hole?)

simon at its63b.UUCP simon at its63b.UUCP
Sun Feb 15 07:07:41 AEST 1987


In article <13252 at sun.uucp> guy at sun.UUCP (Guy Harris) writes:
>Furthermore, it is a botch to *import* SHELL from the environment;
>this causes Makefiles to work differently for people with different
>login shells!  "make" should NOT import SHELL.

And it *certainly* should not attempt to import things like IFS!
This can lead to extremely confusing bugs in complicated makefiles.
The problem is that it strips out initial blank-space when assigning
a make-variable (even from an environ-string), so IFS=" \t\n" gets
changed to IFS="" (double-quotes inserted here by me for clarity), which
can cause shell-scripts executed as subprocesses by make to go totally
haywire!

	Simon.

--------------------
Simon Brown
Department of Computer Science
University of Edinburgh
Scotland, UK.
--------------------
"Life is like that, you know"	 [anon.]



More information about the Comp.unix.wizards mailing list