search

Sabayon / devkit

5 stars 8 forks source link

Builder passes target atoms through unquoted #13

Closed optiz0r closed 7 years ago

optiz0r commented 7 years ago

builder passes the target atoms through to emerge unquoted which means special characters such as "<" and ">" used for versioned atoms are treated as bash special characters. This breaks the build and is a potential security risk.

Builder should quote all targets arguments.

mudler commented 7 years ago

Fixed in https://github.com/Sabayon/devkit/commit/5a3be7c0f15a2a48e40cecb7d8d3102611bfd801 , now should support those as well.