[fpc-pascal] TProcess vs RunProcess()

Jonas Maebe jonas at freepascal.org
Mon Jan 30 08:09:14 CET 2017


Lars wrote:
> Calling the shell is useful for not requiring absolute paths to
> commands... which is why I like fpSystem...

Never ship a program that uses fpSystem for that purpose, because it's
one of the most basic security holes you can have:
https://www.securecoding.cert.org/confluence/pages/viewpage.action?pageId=2130132


Jonas



More information about the fpc-pascal mailing list