Re: Avoiding arbitrary code execution with macroexpansion

[Paul Eggert]

Wilfred Hughes wrote:
> This means that I can get arbitrary code execution by you opening and
> calling code completion a maliciously crafted elisp file!
>
> Is this a security bug in Emacs?

Sounds like it. I suggest constructing a complete, self-contained and hopefully 
easy way to reproduce the problem with emacs -Q, and sending it in a bug report 
to address@hidden Thanks.