makepkg: quote re-evaluation of simple vars
commit2ca27ab3a14c106a7153dda337a61c79db7a6de0
authorDave Reisner <dreisner@archlinux.org>
Thu, 18 Aug 2011 16:27:12 +0000 (18 12:27 -0400)
committerDan McGee <dan@archlinux.org>
Fri, 19 Aug 2011 14:42:41 +0000 (19 09:42 -0500)
tree21665423b92180e713257dd372808041b0784e8d
parent1723e6dc4f8eff8aaa1e0f7560800c76e85f3009
makepkg: quote re-evaluation of simple vars

This is a safety measure to prevent simple code injection.

$ i="foo bar"
$ eval i="$i"
bash: bar: command not found
$ eval i=\"$i\"
$ echo "|$i|"
|foo bar|

Signed-off-by: Dave Reisner <dreisner@archlinux.org>
Signed-off-by: Dan McGee <dan@archlinux.org>
scripts/makepkg.sh.in