develooper Front page | perl.perl5.porters | Postings from October 2011

[perl #93638] Incorrect entry in $LS_COLORS causes glob() failures

Thread Previous | Thread Next
From:
Father Chrysostomos via RT
Date:
October 24, 2011 16:33
Subject:
[perl #93638] Incorrect entry in $LS_COLORS causes glob() failures
Message ID:
rt-3.6.HEAD-31297-1319499196-1806.93638-14-0@perl.org
On Mon Oct 24 14:16:10 2011, sprout wrote:
> On Wed Jun 29 06:34:56 2011, eda@waniasset.com wrote:
> > Nicholas Clark <nick <at> ccl4.org> writes:
> > 
> > >[Sadly, I can't find reference to the far more "fun" bug, whereby at
> > >csh start time, the current directory's name could end up being
> > subject to
> > >string evaluation, *with interpolation*, meaning that a nicely
> > crafted
> > >directory pathname could exploit any setuid script that happened to
> > call
> > >glob.
> > 
> > Another bug caused by csh is that globbing doesn't work with filenames
> > containing
> > a space.  That particular misfeature was preserved when the code was
> > moved into
> > perl itself.
> > 
> 
> You can use quotation marks in that case: <"* copy.txt">.  Due to a bug
> (which I’m fixing), the quotation marks will be interpreted literally if
> there are no spaces, or if the only spaces are at the beginning and end
> of the pattern.

And that bug is now fixed with commit 0b0e6d7.


Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About