Re: Retain orig. filename as suffix for tmp. filename
- From: Adam Byrtek / alpha <alpha student uci agh edu pl>
- To: Pavel Roskin <proski gnu org>
- Cc: mc-devel gnome org
- Subject: Re: Retain orig. filename as suffix for tmp. filename
- Date: Tue, 11 Mar 2003 01:58:18 +0100
On Mon, Mar 10, 2003 at 07:43:02PM -0500, Pavel Roskin wrote:
> Actually, your patch has created a security hole, but not where I
> expected. extfs_cmd() doesn't quote the local filename. It was OK
> before. But since the local name is now based on the entry name, it must
> be quoted.
Please note that is not the case with plain VFS. Unfortunately I've
just tested it with VFSes. A lesson for me I should not make any
assumptions... and that mc design is still a bit mysterious for me.
Regards
Adam
--
_.|._ |_ _. : Adam Byrtek /alpha/
(_|||_)| |(_| : email alpha@(irc.pl|debian.org)
| : jabber alpha.pl(at)jabber.org, pgp 0xB25952C0
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]