3 ms·
There's not a firm list, but certain commands should always be safe to run against hostile input. If I type "make" on a project I downloaded, arbitrary stuff g
by danielweber 12y ago
There's not a firm list, but certain commands should always be safe to run against hostile input.
If I type "make" on a project I downloaded, arbitrary stuff gets run. I accept that as part of make.
If I sha256sum a hostile file, that should never lead to RCE.
- tedunangst 12y agoIf you open a PDF, that should never lead to RCE, but that's not the world we live in. Better for tools not to open PDFs when you don't expect that to happen.
- danielweber 12y agoIt depends what's hiding in the word "open." If I open a PDF in a full-featured reader, I'm slightly ill at ease. If I sha256sum it or wc it, I should be (read: ought to be, in any sane world) perfectly at ease. No matter how complicated the data structures in it, they shouldn't affect those programs.
- tedunangst 12y agoAs per the link, I'm talking about less "opening" a PDF by shelling out to pdftotext. "Hiding" is a good word for the behavior. :)