so according to Martin's and Colin's recommendation, the new patch should: 1) Use only a *list* to build up arguments to be passed to dar, and pass it as a list to the pexpect.spawn to make sure no shell injection can occur and then allow space containing folders to be passed to dar.
2) Possibly check if the specified source folder is an existent and leagle fs folder, prior to continue. doubly making sure things are nice before we give control to dar. -- Malformed directories can cause hubackup to crash https://launchpad.net/bugs/59412 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs