Control: clone -1 -2 Control: retitle -2 dash: accepts anything as an alias name and doesn't quote it, then eval $(alias) will run alias as code Control: tags -2 - wontfix Control: tags -2 + fixed-upstream
On Sat, Dec 17, 2022 at 08:11:57PM +0100, наб wrote: > Indeed; escaping of any kind (quoting or backslash) disables alias > expansion. What's even more fun is that if you do > alias "a'b=c" "ls&id=cd" > then alias will give you > ls&id='cd' > a'b='c' > which is even better since it'll run code when evaled back. This new-found bug (-2 if i got my headers right) has been fixed in: https://git.kernel.org/pub/scm/utils/dash/dash.git/commit/?id=4ec545e8dc98a3f461cf56bed03adafa81c64aec by just quoting the alias names in addition to the values. The original bug remains upstream wontfix. наб
signature.asc
Description: PGP signature
