2009/9/17 Marek Grzybowski <marek.grzybow...@atm.com.pl>:
>
> Andrzej Lemieszek (in CC) found few more, and He escaped them, so use rcs 
> should be safe to:
>
> His patch:
>
[...]
> +        my $realfile_esc = &escape_shell_chars ($realfile);
[...]
> -               `cp $realfile $compfile`;
> +               `cp $realfile_esc $compfile_esc`;
[...]
> +sub escape_shell_chars
> +{
> +    my $arg = shift;
> +    $arg =~ s/[;<>\*\|`&\$!#\(\)\[\]\{\}:'"\s]/\\$&/g;
> +    return $arg;
> +}

This is not going work.  When $realfile_esc is different from
$realfile, then it makes no sense to copy the non-existent
$realfile_esc.  I will go for the solution of rejecting weird file
names.

Cheers,
-- 
                                                    Jens Peter Secher.
_DD6A 05B0 174E BFB2 D4D9 B52E 0EE5 978A FE63 E8A1 jpsecher gmail com_.
A. Because it breaks the logical sequence of discussion.
Q. Why is top posting bad?



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to