@dalias @leon_p_smith @GossiTheDog That's perhaps a mild improvement, but still leaves you open to shell mistakes. Far better is to construct the correct argv array directly, as an array and _not_ as a string of shell input.
It is notable that the inetutils fix did not take this approach, but instead patches things up with (hopefully correct) argument sanitization. I'm not going to rag on people for making a mistake once, but after being bitten once they should really know better.