GNU bug report logs - #32968
M-x compile endangers your /bin/sh and thus your entire system

Previous Next

Package: emacs;

Reported by: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>

Date: Sun, 7 Oct 2018 13:34:03 UTC

Severity: wishlist

Tags: fixed, patch

Merged with 10239, 15032, 16218, 25329, 28035, 35745

Fixed in version 27.1

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

Full log

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
To: bug-gnu-emacs <at> gnu.org
Subject: M-x compile endangers your /bin/sh and thus your entire system
Date: Sun, 07 Oct 2018 21:25:19 +0800

Here's all it takes to wreck /bin/sh and thus your entire system.
M-x compile y y C-x C-c y

make i
test a -lt b
/bin/sh: line 0: test: a: integer expression expected
make: *** [Makefile:1: i] Error 2

# cat Makefile
i:; test a -lt b
# id
uid=0(root) gid=0(root) groups=0(root)

Note the above is with this set:
compilation-auto-jump-to-first-error is a variable defined in ‘compile.el’.
Its value is t
Original value was nil

emacs-version "25.2.2"
This bug report was last modified 5 years and 222 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.