Follow-up Comment #3, bug #54236 (project findutils):
Sorry guys, I don't get what you're talking about, and I'm afraid you didn't
understand my bugreport.
Various quoting styles (as coreutils's "ls" has them) is only marginally
relevant, and I can't see any security implication there, it's primarly about
user convenience (as long as you don't emit ESC and similar characters).
There's nothing wrong in emitting "somewhat special" (but printable)
characters (such as space) unquoted.
My bugreport is about the handling of escape sequences, which control the
terminal emulator in various ways. And "find" already handles them specially,
since it replaces them by a "?" before printing to the terminal. So the intent
is correct. There's nothing to redesign here, at least not as part of this
issue.
This one is a mere off-by-one-ish bug, probably a memmove() not including the
terminating 0 byte, or something similar, resulting in some leftover garbage
at the end of the string. This one is simply an implementation error in
replacing the two-byte UTF-8 character by a "?".
_______________________________________________________
Reply to this item at:
<http://savannah.gnu.org/bugs/?54236>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
