2009/9/17 Marek Grzybowski <marek.grzybow...@atm.com.pl>: > > Andrzej Lemieszek (in CC) found few more, and He escaped them, so use rcs > should be safe to: > > His patch: > [...] > + my $realfile_esc = &escape_shell_chars ($realfile); [...] > - `cp $realfile $compfile`; > + `cp $realfile_esc $compfile_esc`; [...] > +sub escape_shell_chars > +{ > + my $arg = shift; > + $arg =~ s/[;<>\*\|`&\$!#\(\)\[\]\{\}:'"\s]/\\$&/g; > + return $arg; > +}
This is not going work. When $realfile_esc is different from $realfile, then it makes no sense to copy the non-existent $realfile_esc. I will go for the solution of rejecting weird file names. Cheers, -- Jens Peter Secher. _DD6A 05B0 174E BFB2 D4D9 B52E 0EE5 978A FE63 E8A1 jpsecher gmail com_. A. Because it breaks the logical sequence of discussion. Q. Why is top posting bad? -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org