alt Hacker News"fork this repo and fix this bug" is a common job interview request, isn't it?
For many build chains, that involves implicitly installing software.
"fork this repo and fix this bug" is a common job interview request, isn't it?
For many build chains, that involves implicitly installing software.
Such toolchains are dumpster fires whose use invites supply chain attacks. They should never have gained mainstream acceptance and should never be run outside of a sandbox.
That said I wouldn't trust a compiler to be hardened against malicious input and anyway you presumably need to run the output so all of that should be happening in a hardened sandbox regardless.