GNU bug report logs - #32968
M-x compile endangers your /bin/sh and thus your entire system

Previous Next

Package: emacs;

Reported by: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>

Date: Sun, 7 Oct 2018 13:34:03 UTC

Severity: wishlist

Tags: fixed, patch

Merged with 10239, 15032, 16218, 25329, 28035, 35745

Fixed in version 27.1

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 32968 in the body.
You can then email your comments to 32968 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#32968; Package emacs. (Sun, 07 Oct 2018 13:34:03 GMT) Full text and rfc822 format available.
Acknowledgement sent to 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Sun, 07 Oct 2018 13:34:03 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: 積丹尼 Dan Jacobson <jidanni <at> jidanni.org>
To: bug-gnu-emacs <at> gnu.org
Subject: M-x compile endangers your /bin/sh and thus your entire system
Date: Sun, 07 Oct 2018 21:25:19 +0800

Here's all it takes to wreck /bin/sh and thus your entire system.
M-x compile y y C-x C-c y

make i
test a -lt b
/bin/sh: line 0: test: a: integer expression expected
make: *** [Makefile:1: i] Error 2

# cat Makefile
i:; test a -lt b
# id
uid=0(root) gid=0(root) groups=0(root)

Note the above is with this set:
compilation-auto-jump-to-first-error is a variable defined in ‘compile.el’.
Its value is t
Original value was nil

emacs-version "25.2.2"
Merged 10239 15032 16218 25329 28035 32968. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Sun, 07 Oct 2018 15:13:01 GMT) Full text and rfc822 format available.
Forcibly Merged 10239 15032 16218 25329 28035 32968 35745. Request was from Noam Postavsky <npostavs <at> gmail.com> to control <at> debbugs.gnu.org. (Wed, 15 May 2019 11:40:01 GMT) Full text and rfc822 format available.
Severity set to 'wishlist' from 'normal' Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Wed, 15 May 2019 15:35:02 GMT) Full text and rfc822 format available.
Added tag(s) patch. Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Sun, 29 Sep 2019 17:09:03 GMT) Full text and rfc822 format available.
Added tag(s) fixed. Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Wed, 09 Oct 2019 23:21:06 GMT) Full text and rfc822 format available.
bug marked as fixed in version 27.1, send any further explanations to 35745 <at> debbugs.gnu.org and 積丹尼 Dan Jacobson <jidanni <at> jidanni.org> Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Wed, 09 Oct 2019 23:21:07 GMT) Full text and rfc822 format available.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 07 Nov 2019 12:24:04 GMT) Full text and rfc822 format available.
This bug report was last modified 4 years and 164 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.