mirror of
https://github.com/libvirt/libvirt.git
synced 2025-02-25 18:55:26 -06:00
maint: whitespace cleanup
* .dir-locals.el (html-mode): Let emacs help out. * cfg.mk (sc_TAB_in_indentation): Check more files. * docs/internals/command.html.in: Fix offenders. * docs/formatdomain.html.in: Likewise. * docs/internals.html.in: Likewise. Reported by Jiri Denemark.
This commit is contained in:
@@ -20,27 +20,27 @@
|
||||
|
||||
<ul>
|
||||
<li><code>fork+exec</code>: The lowest & most flexible
|
||||
level, but very hard to use correctly / safely. It
|
||||
is easy to leak file descriptors, have unexpected
|
||||
signal handler behaviour and not handle edge cases.
|
||||
Furthermore, it is not portable to mingw.
|
||||
</li>
|
||||
level, but very hard to use correctly / safely. It
|
||||
is easy to leak file descriptors, have unexpected
|
||||
signal handler behaviour and not handle edge cases.
|
||||
Furthermore, it is not portable to mingw.
|
||||
</li>
|
||||
<li><code>system</code>: Convenient if you don't care
|
||||
about capturing command output, but has the serious
|
||||
downside that the command string is interpreted by
|
||||
the shell. This makes it very dangerous to use, because
|
||||
improperly validated user input can lead to exploits
|
||||
via shell meta characters.
|
||||
about capturing command output, but has the serious
|
||||
downside that the command string is interpreted by
|
||||
the shell. This makes it very dangerous to use, because
|
||||
improperly validated user input can lead to exploits
|
||||
via shell meta characters.
|
||||
</li>
|
||||
<li><code>popen</code>: Inherits the flaws of
|
||||
<code>system</code>, and has no option for bi-directional
|
||||
communication.
|
||||
<code>system</code>, and has no option for bi-directional
|
||||
communication.
|
||||
</li>
|
||||
<li><code>posix_spawn</code>: A half-way house between
|
||||
simplicity of system() and the flexibility of fork+exec.
|
||||
It does not allow for a couple of important features
|
||||
though, such as running a hook between the fork+exec
|
||||
stage, or closing all open file descriptors.</li>
|
||||
simplicity of system() and the flexibility of fork+exec.
|
||||
It does not allow for a couple of important features
|
||||
though, such as running a hook between the fork+exec
|
||||
stage, or closing all open file descriptors.</li>
|
||||
</ul>
|
||||
|
||||
<p>
|
||||
|
||||
Reference in New Issue
Block a user