[plasmashell] [Bug 389815] Possibility of code execution when opening volume which label contains `` or $() from notifications panel

[bugzilla_noreply]

https://bugs.kde.org/show_bug.cgi?id=389815

--- Comment #5 from ksieluzy...@gmail.com ---
Sorry I forgot about attachment yesterday.

solid-hardware5 list details returns:

udi = '/org/freedesktop/UDisks2/block_devices/sdb1'
  parent =
'/org/freedesktop/UDisks2/drives/Generic_STORAGE_DEVICE_Generic_STORAGE_DEVICE_0_3a0'
 (string)
  vendor = 'Generic'  (string)
  product = 'STORAGE DEVICE'  (string)
  description = '`touch foo`'  (string)
  Block.major = 0  (0x0)  (int)
  Block.minor = 2065  (0x811)  (int)
  Block.device = '/dev/sdb1'  (string)
  StorageAccess.accessible = true  (bool)
  StorageAccess.filePath = '/media/hex/`touch foo`'  (string)
  StorageAccess.ignored = false  (bool)
  StorageVolume.ignored = false  (bool)
  StorageVolume.usage = 'FileSystem'  (0x2)  (enum)
  StorageVolume.fsType = 'ntfs'  (string)
  StorageVolume.label = '`touch foo`'  (string)
  StorageVolume.uuid = '04dcc0b2dcc09ef4'  (string)
  StorageVolume.size = 64155025408  (0xeeff00000)  (qulonglong)



Regards,
Krzysztof

-- 
You are receiving this mail because:
You are watching all bug changes.