share/gen-sbom split_cflags argues correctly against shlex (it eats backslashes out of Windows paths, so C:\Users\ci\sdk becomes C:Userscisdk and then evades the absolute-path scrub) and then leaves the reader believing plain .split() is right.
It isn't. Plain split breaks -DMSG="hello world" and -I"/opt/my sdk/inc" into two tokens each.
The docstring should name that limitation out loud and point at --cflags-file.
share/gen-sbomsplit_cflagsargues correctly against shlex (it eats backslashes out of Windows paths, soC:\Users\ci\sdkbecomesC:Userscisdkand then evades the absolute-path scrub) and then leaves the reader believing plain.split()is right.It isn't. Plain split breaks
-DMSG="hello world"and-I"/opt/my sdk/inc"into two tokens each.The docstring should name that limitation out loud and point at
--cflags-file.