Re: uname lead to embed code execution

[Greg Wooledge]

felix (fe...@f-hauri.ch) wrote:

> There it is:
> 
> $ declare -A map; key='foo$(uname >/dev/tty)bar'; map[$key]=
> $ echo map["$key"]
> map[foo$(uname >/dev/tty)bar]
> $ echo ${map["$key"]}
> 
> $ unset map["$key"]
> Linux

Yeah, it's sad but true.  I've just added a whole (short) section on
associative array index multiple expansions to my CodeInjection page.

https://mywiki.wooledge.org/CodeInjection