svn rev #19534: trunk/src/windows/build/
jaltman at secure-endpoints.com
Thu Apr 26 20:25:39 EDT 2007
Danilo Almeida wrote:
> Using path can be unreliable and a security hole.
> So silly people have "." in their path and that is a bad idea.
> Having a tool depend on path means you have to trust the users environment.
> This is a build tool, not some setuid program...
> - Danilo
And we are relying on the PATH to find the compiler, the preprocessor,
nmake, gawk, perl, hhc, etc.
The reason that a specific path is being specified is because of name
space collisions. The Windows "find" and the UNIX "find" commands
behave very differently and you need to make sure that you use the UNIX
variant for the script to work properly.
I do agree that there are better ways to find it. As Ken Raeburn
suggested last week a better approach would be to figure out where
"bash" is and then look for "find" in that location.
Secure Endpoints Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20070426/7ccda559/attachment.bin
More information about the krbdev