From: Jay Soffian <jaysoffian@gmail.com>
Date: Mon, 01 Sep 2008 01:52:20 GMT
Subject: Re: [PATCH] change Perl syntax to support Perl 5.6
Message-ID: <76718490808311852n6d6d138ch7bbf5605c6cf7c18@mail.gmail.com>
In-Reply-To: <32541b130808302235g6a23efcfs78efe2ef557cd9c7@mail.gmail.com>

On Sun, Aug 31, 2008 at 1:35 AM, Avery Pennarun <apenwarr@gmail.com> wrote:
> On Sat, Aug 30, 2008 at 4:37 PM, Jakub Narebski <jnareb@gmail.com> wrote:
>> Or you can use "open $fd, '-|'" to fork, an "manually" exec/system.
>
> Shell quoting is a disaster (including security holes, where relevant)
> waiting to happen.  The above is the only sane way to do it, and it
> isn't very hard to implement.  (Instead of system() in the subprocess,
> you can use exec().)

The perlipc man page has example routines. Search for "safe backtick"
and/or "safe pipe".

j.