On Tue, Oct 28, 2008 at 07:40:10PM -0700, Sumanth Naropanth wrote:
> cscope search through the OpenSolaris code shows many places where
> system() is being called in an
> 
>       sprintf(buf, ...); system(buf);
> 
> style with relative pathnames and user inputs. Several of these don't
> [...]

Which proves my point.  Why write code to format strings with complex
quoting only to then parse that quoting away?

Better not use system() at all.

Reply via email to