GNU bug report logs - #27185
GNUMakefile mode shows lines that will be executed in comment color

Previous Next

Package: emacs;

Reported by: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>

Date: Thu, 1 Jun 2017 13:48:02 UTC

Severity: minor

Found in version 28.0.50

To reply to this bug, email your comments to 27185 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#27185; Package emacs. (Thu, 01 Jun 2017 13:48:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Thu, 01 Jun 2017 13:48:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
To: bug-gnu-emacs <at> gnu.org
Subject: GNUMakefile mode shows lines that will be executed in comment color
Date: Thu, 01 Jun 2017 20:42:50 +0800

$ cat Makefile
mmm:
	echo 111 #;\
	echo 222
$ emacs Makefile #shows the second line in comment color,
but when one does M-x compile, we see the second line is indeed executed.
Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#27185; Package emacs. (Mon, 10 Aug 2020 20:35:02 GMT) Full text and rfc822 format available.

Message #8 received at 27185 <at> debbugs.gnu.org (full text, mbox):

From: Stefan Kangas <stefan <at> marxist.se>
To: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
Cc: 27185 <at> debbugs.gnu.org
Subject: Re: bug#27185: GNUMakefile mode shows lines that will be executed in
 comment color
Date: Mon, 10 Aug 2020 13:33:58 -0700

found 27185 28.0.50
thanks

積丹尼 Dan Jacobson <jidanni <at> jidanni.org> writes:

> $ cat Makefile
> mmm:
> 	echo 111 #;\
> 	echo 222
> $ emacs Makefile #shows the second line in comment color,
> but when one does M-x compile, we see the second line is indeed executed.

I can reproduce this on current master. That said, is this really a
common use-case?

Best regards,
Stefan Kangas
bug Marked as found in versions 28.0.50. Request was from Stefan Kangas <stefan <at> marxist.se> to control <at> debbugs.gnu.org. (Mon, 10 Aug 2020 20:35:02 GMT) Full text and rfc822 format available.
Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#27185; Package emacs. (Mon, 10 Aug 2020 22:44:01 GMT) Full text and rfc822 format available.

Message #13 received at 27185 <at> debbugs.gnu.org (full text, mbox):

From: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
To: Stefan Kangas <stefan <at> marxist.se>
Cc: 27185 <at> debbugs.gnu.org
Subject: Re: bug#27185: GNUMakefile mode shows lines that will be executed in
 comment color
Date: Tue, 11 Aug 2020 06:43:17 +0800

>>>>> "SK" == Stefan Kangas <stefan <at> marxist.se> writes:
>> $ cat Makefile
>> mmm:
>> echo 111 #;\
>> echo 222
>> $ emacs Makefile #shows the second line in comment color,
>> but when one does M-x compile, we see the second line is indeed executed.

SK> I can reproduce this on current master. That said, is this really a
SK> common use-case?

That way hackers can hide code in the "comments" that will actually get
executed by unsuspecting programmers.

Imagine a malicious code hidden in a copyright notice section,
sent to staff to "just test this."
Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#27185; Package emacs. (Mon, 10 Aug 2020 22:47:02 GMT) Full text and rfc822 format available.

Message #16 received at 27185 <at> debbugs.gnu.org (full text, mbox):

From: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
To: Stefan Kangas <stefan <at> marxist.se>
Cc: 27185 <at> debbugs.gnu.org
Subject: Re: bug#27185: GNUMakefile mode shows lines that will be executed in
 comment color
Date: Tue, 11 Aug 2020 06:46:40 +0800

That's how many security bugs work: non-common use cases.
This bug report was last modified 4 years and 309 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.