From: Joey Hess <joeyh@joeyh.name>
Date: Fri, 7 Mar 2025 21:15:21 +0000 (-0400)
Subject: disconnect stdio for wasm binaries
X-Git-Tag: archive/raspbian/10.20250416-2+rpi1~1^2~6^2~103
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/cgi/%22https://%22Program/%22http:/www.example.com/cgi/%22https:/%22Program?a=commitdiff_plain;h=45d7f3ca4b8c0f3110424d0a11189deea13b47c8;p=git-annex.git

disconnect stdio for wasm binaries
---

diff --git a/doc/special_remotes/compute/git-annex-compute-wasmedge b/doc/special_remotes/compute/git-annex-compute-wasmedge
index c20f7824a8..a734418125 100755
--- a/doc/special_remotes/compute/git-annex-compute-wasmedge
+++ b/doc/special_remotes/compute/git-annex-compute-wasmedge
@@ -43,5 +43,10 @@ if [ -n "$wasm" ]; then
 	# Use --force-interpreter to avoid wasmedge running AOT native
 	# instructions, which is insecure if the WASM binary comes from
 	# an untrusted source.
-	wasmedge --dir "/:`pwd`" --force-interpreter -- "$wasm" "$@" >&2
+	#
+	# Avoid displaying output from the WASM binary, since it is
+	# untrusted, and could contain harmful terminal escape sequences,
+	# for example.
+	wasmedge --dir "/:`pwd`" --force-interpreter -- "$wasm" "$@" \
+		>/dev/null 2>/dev/null </dev/null
 fi