Comprehensive patch escaping system/open calls in vfs/extfs

Leonard den Ottolander leonard at den.ottolander.nl
Sat Aug 21 02:46:37 UTC 2004


Hi,

This is a comprehensive patch that escapes parameters to system and open
calls that spawn a shell. The patch affects a.in, apt.in, deba.in (parts
already committed), debd.in, deb.in (parts committed) and dpkg.in.

Afaict parameters in mailfs.in, patchfs.in and uzip.in are properly
quoted.

It's a compilation of the previous patches with a few fixes. Also
replaced the regular expression with a subroutine "quote".

Please check for errors and omissions.

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research

-------------- next part --------------
A non-text attachment was scrubbed...
Name: extfs-quoted-cvs.patch.gz
Type: application/x-gzip
Size: 3616 bytes
Desc: not available
URL: <http://lists.midnight-commander.org/pipermail/mc-devel/attachments/20040821/b845067a/attachment.bin>


More information about the mc-devel mailing list