On Thursday, September 25, 2014 10:29:16 AM Chet Ramey wrote: > On 9/25/14, 10:25 AM, Dan Douglas wrote: > > > Have you considered the FPATH mechanism? Exploiting it requires being able to > > create files and set FPATH accordingly. I've had some success with the > > function loader code in examples/functions/autoload.*. I believe it serves > > mostly the same purpose as exported functions. > > I have thought about it, but it is even less backwards compatible than > the other suggestions.
True. I guess one key point is that it's "lazy" and only gets checked if a command doesn't exist. A user could implement function import entirely by means of command_not_found_handle - searching only for a function with the name given in "$1", which should be inherently more secure than looking at every variable at startup. -- Dan Douglas
