Re: [Help-bash] bash suitable for parsing big files?

[Chris Down]

On 2013-09-14 04:21, adrelanos wrote:
> This was another fine idea. I am now using:
>
>    while read -r package status arch version_with; do
> ...
>    done < <(dpkg-query --admindir="$dpkg_status_folder"
> --showformat="\${Package}\t\${db:Status-Abbrev}\t\${Architecture}\t\${Version}\n"
> --show \*)
>
> Is this safe from a security perspective (this is untrusted input) of
> could a malformed dpkg status file containing things like "`$(echo a)`"
> lead to code execution in bash?

That entirely depends on where you are getting these variables from.

pgpW1i2S0XDlr.pgp
Description: PGP signature