[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Help-bash] use variable as array name
From: |
Eduardo A . Bustamante López |
Subject: |
Re: [Help-bash] use variable as array name |
Date: |
Mon, 5 Jan 2015 17:29:53 -0800 |
User-agent: |
Mutt/1.5.23 (2014-03-12) |
On Mon, Jan 05, 2015 at 08:45:41AM -0500, Greg Wooledge wrote:
> No, the tricky part of indirection with arrays is avoiding code injection
> exploits. The only way you can do indirection with arrays is with eval,
> or with constructs that are just eval in disguise (like Bash's declare -n
> syntax).
Ah, right! I meant tricky just to make the original request work, you have to
clone the array and all that. I didn't even bother to mention this.
> And now I can't even remember whether bash's [[ command uses the C locale
> for A-Z ranges, or the user's locale. If it's the user's locale then
> this has ANOTHER vulnerability. :(
shopt -s globasciiranges
Thanks for mentioning this though.