{"action":"opened","issue":{"url":"https://api.github.com/repos/megastep/makeself/issues/55","labels_url":"https://api.github.com/repos/megastep/makeself/issues/55/labels{/name}","comments_url":"https://api.github.com/repos/megastep/makeself/issues/55/comments","events_url":"https://api.github.com/repos/megastep/makeself/issues/55/events","html_url":"https://github.com/megastep/makeself/issues/55","id":109056717,"number":55,"title":"No test to validate executable","user":{"login":"ppslim","id":1895451,"avatar_url":"https://avatars.githubusercontent.com/u/1895451?v=3","gravatar_id":"","url":"https://api.github.com/users/ppslim","html_url":"https://github.com/ppslim","followers_url":"https://api.github.com/users/ppslim/followers","following_url":"https://api.github.com/users/ppslim/following{/other_user}","gists_url":"https://api.github.com/users/ppslim/gists{/gist_id}","starred_url":"https://api.github.com/users/ppslim/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ppslim/subscriptions","organizations_url":"https://api.github.com/users/ppslim/orgs","repos_url":"https://api.github.com/users/ppslim/repos","events_url":"https://api.github.com/users/ppslim/events{/privacy}","received_events_url":"https://api.github.com/users/ppslim/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-30T10:17:08Z","updated_at":"2015-09-30T10:17:08Z","closed_at":null,"body":"'eval' is called on the launched script without any inspection to see if the target $tmpdir is executable.\r\n\r\n[makeself-header.sh](https://github.com/megastep/makeself/blob/master/makeself-header.sh#L494)\r\n\r\nIn cases where (.e.g) /tmp is a ext3 filesystem mounted with noexec, which is frankly not uncommon, we see errors such as.\r\n\r\n```\r\n$ ./s.sh\r\nVerifying archive integrity... All good.\r\nUncompressing Application App version other........................\r\n./s.sh : line 387: ./installer.sh: Permission denied\r\n```\r\n\r\nAt the very least, it should trap a more indicative error."}}