Bug#332286: dget comments

2005-12-31 Thread Christoph Berg
Re: Joey Hess in <[EMAIL PROTECTED]> > system $wget, $file, "$dir/$file"; > system "dpkg-source -x $found_dsc"; Thanks for the hint, implemented. > Other minor problems (not security issues) include not recognising > file: (if using wget; curl does support it), cdrom:, copy:, rsh: and

Bug#332286: dget comments

2005-12-26 Thread Joey Hess
This fills a nice hole and I'd not mind seeing it added to devscripts if Julian and Co agree, but the current implementation is insecure. parse_file pulls out the bits of a dsc or changes file that list other files, using this regexp: if (/^ ([0-9a-f]{32}) (?:\S+ )*(\S+)$/) { It then cal