GNU bug report logs - #32968
M-x compile endangers your /bin/sh and thus your entire system

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Severity: minor; Reported by: 積丹尼 Dan Jacobson <jidanni@HIDDEN>; merged with #10239, #15032, #16218, #25329, #28035; dated Sun, 7 Oct 2018 13:34:03 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.
Merged 10239 15032 16218 25329 28035 32968. Request was from Glenn Morris <rgm@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 7 Oct 2018 13:33:26 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Oct 07 09:33:26 2018
Received: from localhost ([127.0.0.1]:39134 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1g99BW-0003QR-3h
	for submit <at> debbugs.gnu.org; Sun, 07 Oct 2018 09:33:26 -0400
Received: from eggs.gnu.org ([208.118.235.92]:33229)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jidanni@HIDDEN>) id 1g99BU-0003Py-5B
 for submit <at> debbugs.gnu.org; Sun, 07 Oct 2018 09:33:24 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <jidanni@HIDDEN>) id 1g99BO-0005TI-7W
 for submit <at> debbugs.gnu.org; Sun, 07 Oct 2018 09:33:18 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.9 required=5.0 tests=BAYES_00,FROM_EXCESS_BASE64
 autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:41870)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <jidanni@HIDDEN>) id 1g99BN-0005Sy-KJ
 for submit <at> debbugs.gnu.org; Sun, 07 Oct 2018 09:33:18 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:42818)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <jidanni@HIDDEN>) id 1g99BM-00008l-Os
 for bug-gnu-emacs@HIDDEN; Sun, 07 Oct 2018 09:33:17 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <jidanni@HIDDEN>) id 1g99BK-0005RK-KR
 for bug-gnu-emacs@HIDDEN; Sun, 07 Oct 2018 09:33:16 -0400
Received: from pop.dreamhost.com ([64.90.62.162]:46554
 helo=pdx1-sub0-mail-a11.g.dreamhost.com)
 by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <jidanni@HIDDEN>) id 1g99BK-0005Pp-2o
 for bug-gnu-emacs@HIDDEN; Sun, 07 Oct 2018 09:33:14 -0400
Received: from pdx1-sub0-mail-a11.g.dreamhost.com (localhost [127.0.0.1])
 by pdx1-sub0-mail-a11.g.dreamhost.com (Postfix) with ESMTP id 55C277FFF0
 for <bug-gnu-emacs@HIDDEN>; Sun,  7 Oct 2018 06:33:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=jidanni.org; h=from:to
 :subject:date:message-id:mime-version:content-type
 :content-transfer-encoding; s=jidanni.org; bh=d+iNAYmTn+Izuzq6ku
 I26uUpeOM=; b=JwTFDyCvvrbiY9ns9qmb/YTFSWdV4bgwPAvkfcl+OjHMEOP9ob
 ZOz+WEWOWT/sSSbonvDnCcjzZLHPWUf/pmxawGPvgVRkXWURvQ2kIIcnailH3558
 3BwxKD0nHso/beZ/MtiG6+RCey17RNrKEowFWku2TUlZLo85azigRWcEc=
Received: from jidanni.org (114-26-43-42.dynamic-ip.hinet.net [114.26.43.42])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits)) (No client certificate requested)
 (Authenticated sender: jidanni@HIDDEN)
 by pdx1-sub0-mail-a11.g.dreamhost.com (Postfix) with ESMTPSA id 033A17FFDD
 for <bug-gnu-emacs@HIDDEN>; Sun,  7 Oct 2018 06:33:11 -0700 (PDT)
X-DH-BACKEND: pdx1-sub0-mail-a11
From: =?utf-8?B?56mN5Li55bC8?= Dan Jacobson <jidanni@HIDDEN>
To: bug-gnu-emacs@HIDDEN
Subject: M-x compile endangers your /bin/sh and thus your entire system
Date: Sun, 07 Oct 2018 21:25:19 +0800
Message-ID: <87k1mtvqgw.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
X-VR-OUT-STATUS: OK
X-VR-OUT-SCORE: 0
X-VR-OUT-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedtkedruddtgdeiiecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucggtfgfnhhsuhgsshgtrhhisggvpdfftffgtefojffquffvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkfggtgfgsehtkeertddttdejnecuhfhrohhmpejnnjjnucffrghnucflrggtohgsshhonhcuoehjihgurghnnhhisehjihgurghnnhhirdhorhhgqeenucfkphepuddugedrvdeirdegfedrgedvnecurfgrrhgrmhepmhhouggvpehsmhhtphdphhgvlhhopehjihgurghnnhhirdhorhhgpdhinhgvthepuddugedrvdeirdegfedrgedvpdhrvghtuhhrnhdqphgrthhhpeeprehuthhfqdekreeureehiehmpfehnfhiheehsgevkeerpecuffgrnhculfgrtghosghsohhnuceojhhiuggrnhhnihesjhhiuggrnhhnihdrohhrgheqpdhmrghilhhfrhhomhepjhhiuggrnhhnihesjhhiuggrnhhnihdrohhrghdpnhhrtghpthhtohepsghughdqghhnuhdqvghmrggtshesghhnuhdrohhrghenucevlhhushhtvghrufhiiigvpedu
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.9 (----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.9 (-----)

Here's all it takes to wreck /bin/sh and thus your entire system.
M-x compile y y C-x C-c y

make i
test a -lt b
/bin/sh: line 0: test: a: integer expression expected
make: *** [Makefile:1: i] Error 2

# cat Makefile
i:; test a -lt b
# id
uid=3D0(root) gid=3D0(root) groups=3D0(root)

Note the above is with this set:
compilation-auto-jump-to-first-error is a variable defined in =E2=80=98co=
mpile.el=E2=80=99.
Its value is t
Original value was nil

emacs-version "25.2.2"




Acknowledgement sent to 積丹尼 Dan Jacobson <jidanni@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#32968; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sun, 7 Oct 2018 15:15:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.