apt.in.diff (escaping system/open calls)

Fri Aug 20 17:13:01 UTC 2004

Hi,

Ok, apt.in checked for missing escapes on calls to system and opens
that spawn a shell. See attached apt.in.diff.

Some questions:
line 135:    if ( open(PIPEIN, "find /var/cache/apt/archives -type f |") ) {
What about found files in that directory? Should the output of find also be escaped?
idem line 190:    open STAT, "apt-cache dumpavail |"

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research

-------------- next part --------------
A non-text attachment was scrubbed...
Name: apt.in.diff
Type: text/x-patch
Size: 3536 bytes
Desc: not available
URL: <http://lists.midnight-commander.org/pipermail/mc-devel/attachments/20040820/f02b9663/attachment.bin>