Re: wordexp IFS fixes

[Andreas Schwab <schwab@issan.informatik.uni-dortmund.de>]

Tim Waugh <tim@cyberelk.demon.co.uk> writes:

|> Bash says that "set a b c" sets three positional parameters, so is this
|> security hole only for non-whitespace IFS?

This is not a case of IFS splitting.  From the bash manual:

     IFS  The Internal Field Separator  that  is  used  for  word
          splitting after expansion and to split lines into words
          with the read builtin command.  The  default  value  is
          ``<space><tab><newline>''.

EXPANSION
     Expansion is performed on the command line after it has been
     split  into  words.  There are seven kinds of expansion per-
     formed: brace  expansion,  tilde  expansion,  parameter  and
     variable  expansion, command substitution, arithmetic expan-
     sion, word splitting, and pathname expansion.

Andreas.