Retain orig. filename as suffix for tmp. filename

Adam Byrtek / alpha alpha at student.uci.agh.edu.pl
Mon Feb 24 10:13:47 UTC 2003


On Mon, Feb 24, 2003 at 02:22:16AM -0500, Pavel Roskin wrote:
> If you preserve the whole filename, you are more likely to have spaces for
> some other special characters in the filename.  Some programs have
> problems with spaces in the filename (e.g. rpm 4.1).
> 
> Even worse, some programs could be exploited by giving them bogus
> filenames as arguments.  I like your idea, but the security issue should
> be addressed (actually, it exists already because the extension can have
> bad stuff too).

I'm curious how this is different from copying the file manualy and
then pressing F4? AFAIK the filename is not passed through the shell,
so the only problem can be a severe bug in the editor, which still
exists and can be exploited when one copies the file. Of course we
limit it a bit, but it is still a security issue - in a editor, not
mc.

Regards

-- 

  _.|._ |_  _.   :  Adam Byrtek /alpha/
 (_|||_)| |(_|   :  email  alpha@(irc.pl|debian.org)
     |           :  jabber alpha.pl(at)jabber.org, pgp 0xB25952C0



More information about the mc-devel mailing list