Retain orig. filename as suffix for tmp. filename
Adam Byrtek / alpha
alpha at student.uci.agh.edu.pl
Mon Feb 24 10:13:47 UTC 2003
On Mon, Feb 24, 2003 at 02:22:16AM -0500, Pavel Roskin wrote:
> If you preserve the whole filename, you are more likely to have spaces for
> some other special characters in the filename. Some programs have
> problems with spaces in the filename (e.g. rpm 4.1).
>
> Even worse, some programs could be exploited by giving them bogus
> filenames as arguments. I like your idea, but the security issue should
> be addressed (actually, it exists already because the extension can have
> bad stuff too).
I'm curious how this is different from copying the file manualy and
then pressing F4? AFAIK the filename is not passed through the shell,
so the only problem can be a severe bug in the editor, which still
exists and can be exploited when one copies the file. Of course we
limit it a bit, but it is still a security issue - in a editor, not
mc.
Regards
--
_.|._ |_ _. : Adam Byrtek /alpha/
(_|||_)| |(_| : email alpha@(irc.pl|debian.org)
| : jabber alpha.pl(at)jabber.org, pgp 0xB25952C0
More information about the mc-devel
mailing list