Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.
Sign upShell WTFs
Blogged about many of these:
- parsing bash is undecideable -- arrays vs. associative arrays with
"${a[i+1]}" - word splitting as a hack for lack of arrays
-
${}language ambiguity -
exec {fd}<& input.txtis a terrible syntax forfd = open('input.txt') -
testbuiltin ambiguity
Other:
- programming errors are confused with runtime errors:
- trying to assign to or
unseta readonly variable just causes a status 1, which can be ignored. Neederrexitto make it a hard failure.
- trying to assign to or
- dynamic scope
- word elision is confusing and can result in command elision, e.g.
$(true). Fromhelp-bash@. -
errexitproblems -- subshell/command sub, local -- two different issues -
getoptsbuiltin is implemented in all shells, butOPTINDis a global variable with wildly diverging behavior. There's no reliable way to tell when it should be reset, becausegetoptsis called in a loop. This is a fundamental design flaw.- it also sets globals
OPTARGand the secondoptargument
- it also sets globals
- issue #3, arithmetic parsing at runtime
-
evalandechoshouldn't implicitly join multiple args -- this is a confusion of strings and arrays -
trapshouldn't take a string to be eval'd? Why not the name of a function? - multiple expression languages per type, leads to WTFs
-
(( a = b ))is assignment of variable names -
(( a == b ))is equality of variable names -
[[ a = b ]]is equality of strings, like[[ 'a' == 'b' ]] -
[[ a == b ]]is equality of strings, like[[ 'a' == 'b' ]]
-
- undefined variables
0in the arithmetic context - multiple += operators
-
a+=bvs.(( a += b ))
-
-
type-compat.test.sh-- horrible runtime parsing of array declarations pointed out by Nix devs- there is a fundamental redundancy between literals like
a=()anddeclare +a myarray=()
- there is a fundamental redundancy between literals like
- runtime globbing -- it shouldn't happen after variable substitution. Then you can end up globbing untrusted data?
- TODO: OSH needs a fix for this
-
$* "$*" $@ "$@"are not orthogonal. You never need$*and$@."$*"joins by IFS? - hacky syntax rules
- here doc
EOFvs'EOF'/"EOF"/\EOF-- this is a very hacky rule. The thing that's easiest to implement. -
getoptsleading:for error handling is hacky
- here doc
-
readshouldn't return 1 on lack of newline -- it still modified the variable -
[[ foo.py == *.py ]]shouldn't do globbing, should be a different operator - bash WTF: a different lex state for
[[ foo =~ (.*) ]]-- no quotes needed, in fact no quotes allowed!- the
( ) |chars are special
- the
- arrays:
-
${myarray}is the same as${myarray[0]} -
${mystr[@]}is silently allowed - decay to strings on equality --
[[ "${a[@]}" == "${b[@]}" ]]doesn't work - until bash 4.4, lack of ability to use empty arrays and set -u
- fundamental confusion between unset variables and empty arrays. present in
mksh.
- fundamental confusion between unset variables and empty arrays. present in
-
- extended glob
- overloading of
*in*(a*|b) - bash specific: 'shopt -s extglob; echo @(a|b)` gives a syntax error, but if you change the ; to a newline, it doesn't. It does dynamic parsing!!!
- ambiguity of
[[ !(a == a) ]]-- is it a negation of an equality test, or an extended glob? See doc/osh-manual.md. - use case: matching
*.pywithout*_test.pywith extended glob:echo */!(*_test).py- this syntax is confusing! not at all like regexes!
- I guess
!(*_test)is like a negative lookahead and then.*?
- overloading of
- Double quotes within double quotes is an awkward syntax, but sometimes necessary:
echo "${x:-"a*b"}" - argumenting parsing:
set -eou pipefailis a very confusing syntax to parse.set -ooorset -ee. - Too many sublanguages, most of them fully recursive:
- command
- word
- arithmetic
-
[[, and then at runtimetest/[ - brace expansion -- this is recursive
- glob -- non-recursive, but extended glob is recursive
- regular expressions -- recursive
-
IFSis used with two different algorithms: splitting a line forread, and "splicing" an unquoted word into an argv array. POSIX says thay are related, but in practice they seem different? At the very least, one supports backslash escaping and the other doesn't (read -r). Or you can look at it a different way: one supports quotes AND backslashes; the other supports just backslashes. - two different syntaxes for octal C escapes:
echo -e '\0377' and echo $'\377'. FWIW C is the latter -- don't need a leading zero, and Python uses it. - environment variables with hidden structure
- the first char of
$PS4is treated differently - characters in
$IFSare treated differently, depending on whether they're whitespace or not.
- the first char of
Bash-Specific
- The stack doesn't line up!
BASH_SOURCEis off by one fromFUNCNAMEandBASH_LINENOThis is documented but makes no sense! Sort of like the parsing of regexes after=~.
Categories
TODO: organize the criticisms in these categories:
- syntactic puns: the same character is used to mean different things
- opposite problem: different characters/conventions are used to mean the same thing (negation, etc.)
-
(( a == b ))vs[[ a == b ]](although they differ slightly)
-
- sloppiness with types: string, array, undefined vs. empty
- dynamic parsing -- confusing data and code.
- arithmetic inside strings:
s=1+2; [[ $s -eq 3 ]] -
echo -e '\n'andprintf '\n' "\n"vs.$'\n' - local, declare, etc. and array syntax (
type-compat.test.sh) -
shopt -s extglobchanges the parsing algorithm, and it doesn't work on the same line!!!bash -c 'shopt -s extglob; echo @(a|b)'
- arithmetic inside strings:
- lack of error checking / invalid input.
-
echo -e \xisNULin mksh and zsh, but\xin bash. It's a syntax error in C. Shell generally has the "keep going" mindset of JavaScript/PHP/Perl, which makes it hard to use. - likewise with
\1-- should be a syntax error. Or even\dshould be\\d. - TODO: maybe strict-backslash can handle this?
-
Too Many Escaping Algorithms
Escaping constructs: \, 'single quotes', "double quotes", and $'C-style strings'
- arbitrary
CompoundWordtoglob()orfnmatch()input, which allows\escaping but not double quoting. - arbitrary
CompoundWordtoregcomp()input, where characters like[are special too - respect
\escape inreadwithout-r
-
\noutside of double quotes evalutes ton. Inside double quotes, it's\n(which is the same as the behavior inside single quotes). Note that neither evalutes to a newline! That only happens with$'\n'.
Too Many Lexer Modes
-
BASH_REGEXandREGEX_CHARSlexer modes. This is orthogonal to theregcomp()algorithm- Pathological example:
[[ foo =~ [ab]<>(foo|bar) ]]???
- Pathological example:
Too Many Methods of Negation
- Different leading char for flag:
set -evsset +e,declare -avs.declare +a - Different flags:
shopt -svsshopt -u - An Extra Flag:
-
exportvs.export -n-- remove the export bit
-
- Different builtin:
aliasandunaliasare opposites-
setandunsetaren't opposites! One sets options and argv. The other unsets variables.
-
- capitalization:
echo -evsecho -E
Too Many Methods of Showing Internal State
- No args:
set-- prints functions-
readonly,export-- prints vars with those properties
-
-
-parg:declare -p-
shopt -p-- prints bothsetandshoptoptions alias -p
Duplicated External Builtins
-
test-- no reason for this other than speed? -
time-- because it should be a block? But you could do this with a more general mechanism -
kill-- for job specs -
printf-- don't see a reason for this -
getopts-- tighter integration, because we want to mutate shell variables. Doesn't behave like a builtin, but has the syntax of one.
Too many Single Letters
- all the flags:
read -n,echo -n, etc. - not shell, but a common pattern:
date +%mvsdate +%M-- I can never remember which. I don't know what+means either. -
tar xvzf foo.tar.gzcan just betar -x -v -z < foo.tar.gz- or
tar --verbose --extract --gzip < foo.tar.gz
- or
See Unix Tools
Builtins that Take Variable Names
A questionable Pattern? These builtins don't behave like external commands because they can mutate memory.
read varnamegetopts SPEC varname
Press h to open a hovercard with more details.