From: Michael Gebetsroither <michael.geb@gmx.at>
Date: Sun, 19 Mar 2006 13:13:21 +0000 (+0100)
Subject: added note about security hole in execute function
X-Git-Tag: 1.02.11~2
X-Git-Url: https://git.grml.org/?a=commitdiff_plain;h=a69ffc4d328e3a10a42bb7ba5127ce7e9d139dff;hp=cb8f4879a98ecc11d2bcb44aa97ce117747cdc8a;p=grml-shlib.git

added note about security hole in execute function
---

diff --git a/sh-lib b/sh-lib
index e68951c..be6f60e 100644
--- a/sh-lib
+++ b/sh-lib
@@ -177,6 +177,10 @@ function warnLog
 #
 ###
 
+##
+# ATTENTION... THIS FUNCTINOS IS A BIG SECURITY HOLE
+# this function will be changed in future release
+##
 # i don't want to write exit status controle stuff every time
 function execute
 {
@@ -186,6 +190,7 @@ function execute
 
   local ret_=''
 
+  # NOT A GOOD IDEA
   eval "$to_exec_"
   ret_=$?