Ciprian Dorin Craciun personal blog
The curious case of shell commands, or how "this bug is required by POSIX" (2021)
About the fatal perils and traps of many modern tools that handle "shell commands" as passed through `system(3)` or `sh -c`. Or, how by the end of 2020, we still haven't given up on shell's equivalent "SQL building", or how shell's equivalent "SQL injection" still thrives in our engineering world... Plus a `glibc`…
- Points
- 162
- HN comments
- 125
- Submissions
- 1
- Cited by
- 0 commenters
Software EngineeringSystems & Performance2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jun 10, 2025 | The curious case of shell commands, or how "this bug is required by POSIX" (2021) by wonger_ | 162 | 125 |