Comprehensive patch escaping system/open calls in vfs/extfs



Hi,

This is a comprehensive patch that escapes parameters to system and open
calls that spawn a shell. The patch affects a.in, apt.in, deba.in (parts
already committed), debd.in, deb.in (parts committed) and dpkg.in.

Afaict parameters in mailfs.in, patchfs.in and uzip.in are properly
quoted.

It's a compilation of the previous patches with a few fixes. Also
replaced the regular expression with a subroutine "quote".

Please check for errors and omissions.

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research

Attachment: extfs-quoted-cvs.patch.gz
Description: GNU Zip compressed data



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]