4 ms·

Yes, but if you can control enviroment variable names then you can also set LD_PRELOAD and a whole load of other nasty enviroment variables.

• bodyfour 12y ago
  ...although some programs blacklist unsafe environment variable names. They all should be updated to also blacklist bash function values.
  • mh- 12y ago
    fortunately, sudoers(5) (et al.) whitelist certain variables.