11198674983
63%

Ran 06 Oct 2024 03:43AM UTC

Jobs 10

Files 3

Run time 1min

Badge

Embed ▾

Committed 05 Oct 2024 09:11AM UTC coverage: 73.805%. Remained the same

Build # 11198674983

Build Type

push

github

Committed by

web-flow

Commit Message

grep: avoid shell code evaluation (#749)

* grep: avoid shell code evaluation

* When running grep -g or -u, the default code uses Term::Cap but this fails over to executing external tput command
* tput would be available on Linux/BSD but is not a consideration for Windows
* Feed the TERM environment variable to tput command in single quotes to prevent shell commands from being initiated though TERM
* To verify this I had to temporarily bypass the Term::Cap code on my Linux system
* No other instances of backticks, system() or exec() calls within grep

%TERM='linux;halt -p;' perl  grep -g include a.c   # with patch applied tput fails but system doesn't halt
tput: unknown terminal "linux;halt -p;"
tput: unknown terminal "linux;halt -p;"
#include <stdio.h>
#include <stdlib.h>

* execute tput without subshell

* Previous commit was half baked because invalid user input could still creep into shell
* Switch backticks over to system LIST, which does not execute tput via a shell
* Code for redirecting and restoring STDOUT was lifted out of bin/awk

Run Details

355 of 481 relevant lines covered (73.8%)

47092.15 hits per line

Jobs

ID	Job ID	Ran	Coverage
1	11198674983.1	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
2	11198674983.2	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
3	11198674983.3	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
4	11198674983.4	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
5	11198674983.5	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
6	11198674983.6	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
7	11198674983.7	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
8	11198674983.8	06 Oct 2024 03:43AM UTC	73.07	GitHub Action Run
9	11198674983.9	06 Oct 2024 03:44AM UTC	73.07	GitHub Action Run
10	11198674983.10	06 Oct 2024 03:44AM UTC	73.07	GitHub Action Run

Source Files on build 11198674983

Detailed source file information is not available for this build.

briandfoy / PerlPowerTools / 11198674983
63%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11198674983

briandfoy / PerlPowerTools / 11198674983 63%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11198674983

briandfoy / PerlPowerTools / 11198674983
63%

README BADGES
x