4 ms·
Yeah, "safe_exec" is a useless name without context. But the context was you need to call a program from another program. Many people would call system() or wha
by bulatb 2y ago
Yeah, "safe_exec" is a useless name without context. But the context was you need to call a program from another program. Many people would call system() or whatever because usually it's obvious and easy, and the pitfalls are less so.
Shelling out is not the only option. People are just saying not to use that option. Better ones won't save you if you purposely do something stupid. They will save you if the user wants to trick you into doing something else.
- tasuki 2y agoA nearby comment mentioned escaping. I guess that might be a good reason to use execv?