On 4/10/15 11:09 AM, Greg Wooledge wrote:
> On Fri, Apr 10, 2015 at 09:13:17AM -0500, Eduardo A. Bustamante López wrote:
>> Now, for the features in bash that'd be actually useful:
>>
>> - discipline functions and compound datatypes (like in ksh)
>> - a way to do wrap arbitrary OS system calls with a builtin, so that instead
>> of
>> having thousands of builtins each interacting with the system, we could just
>> do: `syscall lstat foo' and get something useful.
>
> (Even adding *just* examples/loadables/finfo as a standard builtin would
> be so helpful! But we also get a huge number of requests for readlink.)
>
>> - a faster implementation of the variable lookup code
>> - a shopt to disable evaluation of shell code in places like arithmetic
>> expansion
>> - a better way to deal with binary input (specially NUL bytes)
>> - and many more, these are the ones I can think of right now
>
> Yeah, same here. I didn't know I was going to be quizzed on this, or
> I would have studied.
>
> - Fix the $"..." security hole (I tried and failed).
> http://www.gnu.org/software/gettext/manual/html_node/bash.html
Yeah, I didn't like the all-or-nothing choice the patch implemented. If
command substitution is the problem, a better approach would have been to
inhibit command substitution instead of every word expansion. That's just
not easy to do at the point where locale transformation gets done -- it
requires processing the translated string to insert some kind of quoting.
--
``The lyf so short, the craft so long to lerne.'' - Chaucer
``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU [email protected] http://cnswww.cns.cwru.edu/~chet/
