Beware xargs security holes

Lawrence V. Cipriani lvc at cbnews.att.com
Wed Oct 10 06:42:47 AEST 1990


In article <9365:Oct910:43:4590 at kramden.acf.nyu.edu>, brnstnd at kramden.acf.nyu.edu (Dan Bernstein) writes:
> Yeah. xargs should have a -0 option for taking null-separated filenames
> for its input. find should have a -print0 option for producing similar
> output.

It does, sort of:

	find . -print | xargs -i your_command '{}'

but, since the -i option executes your_command once per file it will be
very slow.
-- 
Larry Cipriani, att!cbvox!lvc or lvc at cbvox.att.com



More information about the Alt.sources.d mailing list