RE: Can System() of Perl be bypassed?

-----Original Message-----
From: Brian Hatch [mailto:secprog@ifokr.org] Sent: Thursday, 23 January, 2003 12:44
To: Ian Charnas
Cc: Sandeep Giri; secprog@securityfocus.com Subject: Re: Can System() of Perl be bypassed?

> open2(\*READ, \*WRITE, '/bin/grep', $sanitized_arg,

Note also that in 5.8, if all you're interested in is STDOUT, Perl lets you do this:

open(FH, "-|", "/bin/grep", $sanitized_arg, "/usr/dict/words") or die ...;

This is somewhat equivalent to doing the fork and exec in list form, which would not invoke the shell to parse the command string.

More goodies: http://www.perldoc.com/perl5.8.0/pod/func/open.html

David Received on Tue Jan 28 17:46:14 2003