Comment by immibis

5 days ago

So instead of unquoting your data itself, ssh invokes another program to unquote it. That's a distinction without a difference.

6 comments

immibis

Reply
blueflow  5 days ago

No, ssh is called by the local shell. ssh never gets to see the quoted value that you typed in your shell. This mechanism is unrelated to ssh, at all:

  $ printf "%s\n" "asdf"
  asdf

You see the double quotes go missing.

This happens as part of the shell turning the command string into argument vectors to pass to execv().

  • immibis  5 days ago

    When I run:

    ssh foo@bar "echo 'hello world'"

    ssh chooses to unquote the string: echo 'hello world'

    splitting it into two parts (echo, and hello world), and then running the program echo with the argument hello world.

    The fact it does this via a separate program is irrelevant.

    • blueflow  5 days ago

      > ssh chooses to unquote the string > splitting it into two parts

      wrong, ssh does no argument splitting

      > then running the program echo

      wrong, it passes the string to the users login shell, whatever program that is. See sshd(8).

      > The fact it does this via a separate program is irrelevant

      just gently caress yourself.

      1 reply →