[tex-live] %& first line parsing different jobname

[Robin Fairbairns]

T T <t34www at googlemail.com> wrote:

> 2009/6/9 phillip weidlich <phillip.weidlich at rwth-aachen.de>:
> > Sure I can imagine that. But there's been hope because it works in other
> >  environments.
> >
> > Is there any other way, using TeXLive, to achieve my goal?
> > (changing the filename of the output file with 'just' placing a command
> > somewhere in the source file?)
> 
> You could use a wrapper script that grabs the options from the %&-line
> and passes them to (pdf)latex. Not as convenient but the end result
> should be the same.
> 
> Going back to the original question: I understand that this limited
> parsing of the %&-line is a feature, not a bug, am I right?

since it's a potential security issue[*], it should be protected by a
control like that on write 18.  if it's not, then its existence in
miktex is surely a bug.

robin

[*] attacker sends a file which you innocently run through pdflatex, and
it overwrites some important pdf file of yours.