News for hackers. Stuff that matters.
Re:Show HN: Bash-my-AWS adds `bmai <missing command>` to gen... by mdaniel on Sunday January 12, 2025 @11:52PM (#42680187)
Surely a repo dedicated to bash would know not to use $@ without its quotes :-( https://github.com/bash-my-aws/bash-my-aws/blob/e5cdae316084...

Have they not heard of shellcheck?

Re:Show HN: Bash-my-AWS adds `bmai <missing command>` to gen... by mike-bailey on Monday January 13, 2025 @12:26AM (#42680330)
The __bma_read_filters function is designed to take all arguments and join them with | to create a grep pattern. Adding quotes around $@ would break this functionality because:

__bma_read_filters "arg1 arg2" arg3

With unquoted $@:

• Gets word split into: arg1 arg2 arg3 • Results in: arg1|arg2|arg3

With quoted "$@":

• Would be passed as: "arg1 arg2" arg3 • Results in: "arg1 arg2"|arg3

The unquoted version is correct here since the function is intentionally using word splitting to create individual grep pattern elements.

This is one of those cases where the normal "always quote your variables" rule has a valid exception because word splitting is part of the intended behavior.

Re:Show HN: Bash-my-AWS adds `bmai <missing command>` to gen... by mike-bailey on Monday January 13, 2025 @12:31AM (#42680362)
Last time BMA was on front page of HN was 1 Jan 2020 (for about 23 hours IIRC).

https://news.ycombinator.com/item?id=21921293