|
|
|
|
|
by TheDong
451 days ago
|
|
We're not disagreeing. Even if there's no 'sploit there, people have spaces in their directory or file names, and it's kinda nice for your tool to work with those, so obviously you should be using an execve variant to pass arguments properly. I assume the reason for the incorrect system call is that doing a shell redirect ('>') does actually look prettier though. Doing the actual right code is definitely less pretty looking IMO: https://github.com/luvit/zlib/blob/8de57bce969eb9dafc1f1f5c2... |
|